En resumen
- CVE-2014-8144 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a doorkeeper, doorkeeper (doorkeeper project).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.65%, mayor que el 51.4% de las vulnerabilidades.
- Solución: actualizar a 1.4.1 o posterior.
Description
Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors.
NVD description
Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free