Skip to content
OpenAdvisories

Package · RubyGems

doorkeeper

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.2
    CVE-2023-34246

    Doorkeeper Improper Authentication vulnerability

    Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable t…

    doorkeeper-gem doorkeeper doorkeeper ruby-doorkeeper Debian Ubuntu RubyGems
  • Medium 6.1
    CVE-2018-1000088

    Doorkeeper is vulnerable to stored XSS and code execution

    Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting (XSS) vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth Client's name will cause users interacting with it will exec…

    doorkeeper ruby-doorkeeper ruby-doorkeeper Debian Ubuntu RubyGems
  • Medium —
    CVE-2014-8144

    Doorkeeper vulnerable to Cross-site Request Forgery

    Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors.

    doorkeeper RubyGems