spree_auth_devise Security Advisories - Rubygems | Ecosyste.ms: Advisories

spree_auth_devise

Provides authentication and authorization services for use with Spree by using Devise and CanCan.

View on github.com · View on rubygems.org

Security Advisories for spree_auth_devise in rubygems

Moderate

over 4 years ago

spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles GSA_kwCzR0hTQS1qcDU3LTlqMzctNTQ3Ns4AAfSa

rubygems spree_auth_devise

Critical

almost 5 years ago

Spree Auth Devise vulnerability allows for authentication bypass through CSRF weakness GSA_kwCzR0hTQS0yNnh4LW00cTIteGhxOM0XUg

rubygems spree_auth_devise

Filter by Severity

Moderate 1 Critical 1