Filtered by vendor Heartcombo Subscriptions
Filtered by product Devise Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-8314 1 Heartcombo 1 Devise 2024-11-21 7.5 High
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access.