CVE-2013-0233

Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.

• Opensuse

  OS
  Opensuse
  12.2

• Plataformatec Devise

  APP
  Plataformatec
  1.5.01.5.11.5.21.5.32.0.02.0.12.0.22.0.32.0.42.1.02.1.12.1.22.2.02.2.12.2.2

• Ruby Lang Ruby

  APP
  Ruby-Lang
  all versions