Open Redirect

Overview devise is a flexible authentication solution for Rails with Warden. Affected versions of this package are vulnerable to Open Redirect in the FailureAppredirecturl method when handling non-GET requests after a session timeout. An attacker can cause users to be redirected to arbitrary...

Devise Security Breach

Devise is a flexible Warden-based authentication solution for Rails. A security vulnerability exists in versions prior to Devise 3.5.4 that stems from incorrectly disposing of a session cookie, which could allow an attacker to gain unauthorized access to a persistent application...

SUSE CVE-2013-0233

Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass...