CVE-2015-8314

Published December 12th, 2023

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access.

heartcombo/devise

Flexible authentication solution for Rails with Warden.

GitHub

24.4K