PT-2013-2176 · Plataformatec · Devise

Reedloden · Published 2013-04-25 · Updated 2018-10-30 · CVE-2013-0233

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Devise gem versions 1.5.x before 1.5.4 Devise gem versions 2.0.x before 2.0.5 Devise gem versions 2.1.x before 2.1.3 Devise gem versions 2.2.x before 2.2.3

Description The issue is related to improper type conversion when performing database queries. This might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors. For example, it could be used to reset passwords of arbitrary accounts.

Recommendations For Devise gem version 1.5.x, update to version 1.5.4 or later. For Devise gem version 2.0.x, update to version 2.0.5 or later. For Devise gem version 2.1.x, update to version 2.1.3 or later. For Devise gem version 2.2.x, update to version 2.2.3 or later.

Exploit

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

CWE-399

Related Identifiers

CVE-2013-0233

GHSA-JXHW-MG8M-2PJ8

Affected Products

Devise

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/rails_devise_pass_reset.rb · Exploit
• 🔥 http://metasploit.com/modules/auxiliary/admin/http/rails_devise_pass_reset · Exploit
• 🔥 http://phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html · Exploit
• http://blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0233 · Security Note
• https://ubuntu.com/security/CVE-2013-0233 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-0233 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jxhw-mg8m-2pj8 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-0233 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-0233 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-03/msg00000.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-0233 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-0233 · Security Note
• https://github.com/Snorby/snorby/issues/261 · Note
• https://web.archive.org/web/20140726005251/http://phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html · Note