CVE-2013-0233

CVE-2013-0233 affects specific versions of the Devise gem for Ruby (2.2.x, 2.1.x, 2.0.x, and 1.5.x) when used with certain databases. This vulnerability stems from improper type conversion during database queries, potentially allowing attackers to bypass security checks and reset arbitrary user passwords. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring no authentication and moderate attack complexity, leading to potential partial confidentiality, integrity, and availability impacts. While not actively exploited in the wild, a Metasploit module exists for password reset, indicating exploitability, though there is minimal community discussion or media coverage.