Doorkeeper subject to Incorrect Permission Assignment

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-1000211 · ADVISORY
• doorkeeper-gem/doorkeeper · WEB
• doorkeeper-gem/doorkeeper#1119 · WEB
• GitHub Advisory GHSA-694m-jhr9-pf77 · ADVISORY
• doorkeeper-gem/doorkeeper · PACKAGE

doorkeeper のその他の脆弱性

• CVE-2023-34246中 6.5Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization reques…
• CVE-2020-10187高 7.5Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret on…
• CVE-2018-1000088中 6.1Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting (XSS) vulnerability in web view's OAuth app form, user authorization …
• CVE-2016-6582緊急 9.1The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging fai…
• CVE-2014-8144中 6.8Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecifi…