corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08797-e33d-71d1-8982-1a93d16e71c2

The Devise Extension That Peeled off One Layer of the Security Onion (CVE-2021-28680)

labanskoller.se · published 23 March 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at labanskoller.se Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
40
Words captured
3,398

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://defensify.se/home
defensify.se
https://rubyonrails.org/
rubyonrails.org
https://github.com/heartcombo/devise/issues/5329
github.com
https://github.com/oivoodoo/devise_masquerade/pull/76
github.com
https://github.com/oivoodoo/devise_masquerade/releases/tag/v1.3.1
github.com
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28680
cve.mitre.org
https://github.com/oivoodoo/devise_masquerade/issues/83
github.com
https://owasp.org/www-project-top-ten/
owasp.org
https://owasp.org/www-project-application-security-verification-standard/
owasp.org
https://nvd.nist.gov/vuln-metrics/cvss
nvd.nist.gov
https://github.com/heartcombo/devise/
github.com
https://github.com/rack/rack
github.com
https://github.com/wardencommunity/warden
github.com
https://en.wikipedia.org/wiki/PBKDF2
en.wikipedia.org
https://ruby-doc.org/core-3.0.0/Marshal.html
ruby-doc.org
https://stackoverflow.com/questions/23597718/what-is-the-warden-data-in-a-rails-devise-session-composed-of/23683925
stackoverflow.com
https://github.com/oivoodoo/devise_masquerade/
github.com
https://en.wikipedia.org/wiki/Bcrypt
en.wikipedia.org
https://github.com/oivoodoo/devise_masquerade/releases/tag/v1.2.0
github.com
https://github.com/ruby/openssl/blob/b28fb2f05c1e90130b2d4fdcbdae5234b66bbb05/ext/openssl/ossl_kdf.c
github.com
https://github.com/rails/rails/blob/447e28347eb46e2ad5dc625de616152bd1b69a32/activesupport/lib/active_support/key_generator.rb
github.com
https://gist.github.com/mbyczkowski/34fb691b4d7a100c32148705f244d028
gist.github.com
https://gchq.github.io/CyberChef/
gchq.github.io
https://github.com/oivoodoo/devise_masquerade/security/advisories
github.com
https://docs.github.com/en/github/managing-security-vulnerabilities/publishing-a-security-advisory
docs.github.com
https://cveform.mitre.org/
cveform.mitre.org
https://github.com/oivoodoo/devise_masquerade/commit/bc0d09d3c04062aeeaaed60d7607df4aa3492002
github.com
https://twitter.com/LabanSkoller/status/1374461045633257482
twitter.com
https://www.linkedin.com/posts/labanskoller_the-devise-extension-that-peeled-off-one-activity-6780228700697849856-Tqfq
linkedin.com
https://github.com/labanskoller/labanskoller.se/edit/main/content/blog/2021-03-23-devise_masquerade.md
github.com
https://github.com/carlosantoniodasilva
github.com
https://github.com/oivoodoo/
github.com
https://www.linkedin.com/in/jinnyramsmark/
linkedin.com
https://www.linkedin.com/in/niklas-andersson-21308a7/
linkedin.com
https://www.dreamstime.com/royalty-free-stock-image-peeling-onion-image27402026
dreamstime.com
https://www.dreamstime.com/leeavison_info
dreamstime.com
https://www.dreamstime.com/
dreamstime.com
https://labanskoller.se/tags/web-vulnerabilities
labanskoller.se
https://labanskoller.se/tags/coordinated-disclosure
labanskoller.se
https://labanskoller.se/tags/cve
labanskoller.se