Skip to content
OpenAdvisories

Package · Debian

ruby-doorkeeper

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2023-34246

    Doorkeeper Improper Authentication vulnerability

    Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable t…

    doorkeeper-gem doorkeeper doorkeeper ruby-doorkeeper Debian Ubuntu RubyGems
  • Medium 6.1
    CVE-2018-1000088

    Doorkeeper is vulnerable to stored XSS and code execution

    Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting (XSS) vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth Client's name will cause users interacting with it will exec…

    doorkeeper ruby-doorkeeper ruby-doorkeeper Debian Ubuntu RubyGems