devise_masquerade

RubyGems1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting devise_masqueradepage 1 of 1

CVE-2021-28680HIGHCVSS 8.1EG 8.1✓ Fixed in 1.3.1
2021-12-07
vulnerable: 0.0.1 ... 1.3.0 (36 versions)
The devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of security protection compared to a situat…

Check whether devise_masquerade is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for devise_masquerade CVEs against the assets you own.

Start Free Scan →