Skip to content
OpenAdvisories

Package · Debian

ruby-doorkeeper

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2020-10187

    Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper

    Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply…

    doorkeeper ruby-doorkeeper Debian RubyGems
  • High 7.5
    CVE-2018-1000211

    Doorkeeper subject to Incorrect Permission Assignment

    Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.

    doorkeeper ruby-doorkeeper ruby-doorkeeper Debian Ubuntu RubyGems