RubyGems/devise_masquerade CVE-2021-28680: high 8.1, EPSS 1.25%
Improper Privilege Management in devise_masquerade
Action: Upgrade devise_masquerade to 1.3.1 or later.
bundle update devise_masqueradeAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
- osv: GHSA-25f5-gc4h-hc22
- https://nvd.nist.gov/vuln/detail/CVE-2021-28680
- https://github.com/oivoodoo/devise_masquerade/issues/83
- https://github.com/oivoodoo/devise_masquerade/pull/76
- https://github.com/oivoodoo/devise_masquerade
- https://github.com/oivoodoo/devise_masquerade/releases/tag/v1.3.1
- https://labanskoller.se/blog/2021/03/23/the-devise-extension-that-peeled-off-one-layer-of-the-security-onion-cve-2021-28680
CVE-2021-28680 · published · modified · JSON