Cross-site Request Forgery (CSRF)

Overview solidusauthdevise is a Provides authentication and authorization services for use with Solidus by using Devise and CanCan. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via solidusauthdevise. Note: Users are affected only if protectfromforgery method...

PT-2021-24381

Name of the Vulnerable Software and Affected Versions: solidus auth devise affected versions not specified solidus core versions prior to 2.11.12 solidus core versions prior to 3.0.3 solidus core versions prior to 3.1.3 Description: A security issue has been discovered in solidus auth devise. The...

PT-2021-23234

Name of the Vulnerable Software and Affected Versions solidus auth devise versions prior to 2.5.4 Description The issue is a CSRF vulnerability that allows user account takeover. It affects applications using any version of the frontend component of solidus auth devise if the protect from forgery...