Lucene search
Veracode Vulnerability DatabaseVERACODE:33201HistoryDec 08, 2021 - 3:32 a.m.
Man-in-the-Middle (MitM)
2021-12-0803:32:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
61.7%
devise_masquerade is vulnerable to man-in-the-middle attacks. An attacker can impersonate any user by manipulating masquerade back functionality of the device extension.
| CPE | Name | Operator | Version |
|---|---|---|---|
| devise_masquerade | le | 1.2.0 | |
| devise_masquerade | le | 1.2.0 |
References
Related
prion
prion
Code injection
2021-12-07 21:15:00
cvelist
cvelist
CVE-2021-28680
2021-12-07 20:32:18
cve
cve
CVE-2021-28680
2021-12-07 21:15:08
osv
osv
Improper Privilege Management in devise_masquerade
2021-12-08 19:55:30
CVE-2021-28680
2021-12-07 21:15:08
cnvd
cnvd
Alexandr Korsak Devise Masquerade has an unspecified vulnerability
2021-12-08 00:00:00
nvd
nvd
CVE-2021-28680
2021-12-07 21:15:08
github
github
Improper Privilege Management in devise_masquerade
2021-12-08 19:55:30