CVE-2023-34246
Published Jun 12, 2023Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clie…
Vendor/product archive
doorkeeper_project / doorkeeper CVEs
Beta · best-effort6 CVEs tagged to doorkeeper_project / doorkeeper — 1 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2020-10187
Published May 4, 2020Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application o…
CVE-2018-1000211
Published Jul 13, 2018Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked f…
CVE-2018-1000088
Published Mar 13, 2018Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting (XSS) vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stor…
CVE-2016-6582
Published Jan 23, 2017The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token R…
CVE-2014-8144
Published Dec 31, 2014Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a use…
Showing 1-6 of 6 CVEsPage 1 of 1