Vulnerabilities > Plataformatec > Devise > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-04-03 CVE-2019-5421 Improper Restriction of Excessive Authentication Attempts vulnerability in Plataformatec Devise
Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempts` method.
network
low complexity
plataformatec CWE-307
critical
 9.8
9.8