Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2021-0426

Date: August 19, 2025

In solidus-core there is authentication Bypass by CSRF Weakness.The actual vulnerability has been discovered on solidus_auth_devise.For extra security, update solidus_core to versions 3.1.3, 3.0.3 or 2.11.12.

Language: Ruby

Severity Score

Related Resources (5)

https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2
https://github.com/solidusio/solidus
https://github.com/solidusio/solidus/commit/dcace31c9564802aefa71f9643665001c0f86091
https://github.com/solidusio/solidus/security/advisories/GHSA-5629-8855-gf4g
https://www.mend.io/vulnerability-database/WS-2021-0426

Severity Score

Weakness Type (CWE)

Cross-Site Request Forgery (CSRF)

CWE-352

Use of Uninitialized Variable

CWE-457

Authentication Bypass by Primary Weakness

CWE-305

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us