CVE-2019-16109

An issue was discovered in Plataformatec Devise before 4.7.1

published September 8, 2019

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmation_token, if a database record has a blank value in the confirmation_token column. (However, there is no scenario within Devise itself in which such database records would exist.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01832 · 78.7th percentile
Published
2019-09-08T19:57Z
EPSS history
Timeline
  • 08 SEP 19:57Z
    An issue was discovered in Plataformatec Devise before 4.7.1
    cvelistv5