Devise Masquerade Project Devise Masquerade — known CVE vulnerabilities
Every CVE whose affected-product data names Devise Masquerade Project Devise Masquerade, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2021-28680 — CVSS 8.1 (high): The devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let…