Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21573
HistorySep 25, 2019 - 3:11 a.m.

Cross-site Scripting (XSS)

2019-09-2503:11:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

37.4%

devise_token_auth is vulnerable to cross-site scripting (XSS). The vulnerability exists as the omniauth failure endpoint is vulnerable through the message parameter.

CPENameOperatorVersion
devise_token_authle1.1.2

0.001 Low

EPSS

Percentile

37.4%

Related for VERACODE:21573