Lucene search
+L

CVE-2019-5421

🗓️ 03 Apr 2019 14:21:37Reported by hackeroneType 
cvelist
 cvelist
🔗 www.cve.org👁 50 Views

Plataformatec Devise version 4.5.0 and earlier contain a CWE-367 vulnerability in the `Devise::Models::Lockable` class, allowing multiple concurrent requests to prevent an attacker from being blocked on brute force attacks

Related
Affected
Refs
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2019-5421
3 Apr 201914:21
–cve
debiancve
Debian CVE
CVE-2019-5421
3 Apr 201914:21
–debiancve
euvd
EUVD
EUVD-2019-0372
7 Oct 202500:30
–euvd
github
Github Security Blog
devise Time-of-check Time-of-use Race Condition vulnerability
19 Mar 201918:03
–github
mend
Mend
CVE-2019-5421
3 Apr 201914:21
–mend
nvd
NVD
CVE-2019-5421
3 Apr 201915:29
–nvd
osv_debian
osv_debian
DEBIAN-CVE-2019-5421
3 Apr 201915:29
–osv_debian
osv_ghsa
osv_ghsa
GHSA-73RF-6MRF-759Q devise Time-of-check Time-of-use Race Condition vulnerability
19 Mar 201918:03
–osv_ghsa
osv_ubuntu
osv_ubuntu
UBUNTU-CVE-2019-5421
3 Apr 201915:29
–osv_ubuntu
prion
Prion
Design/Logic Flaw
3 Apr 201915:29
–prion
Rows per page
[
  {
    "product": "Devise ruby gem",
    "vendor": "Plataformatec",
    "versions": [
      {
        "status": "affected",
        "version": "4.5.0 and earlier using the lockable module"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Apr 2019 14:21Current
9.5Critical risk
Vulners AI Score9.5
EPSS0.01556
50