Количество 2
Количество 2
CVE-2013-2506
почти 13 лет назад
app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves.
CVSS2: 4
EPSS: Низкий
GHSA-jp57-9j37-5476
больше 3 лет назад
spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2013-2506 app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves. | CVSS2: 4 | 0% Низкий | почти 13 лет назад |
| GHSA-jp57-9j37-5476 spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу
20