Skip to content
OpenAdvisories

Archive

31 December 2014

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —

    Doorkeeper vulnerable to Cross-site Request Forgery

    Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors.