CVE-2018-1000088

published 2018-03-13

CVE-2018-1000088: Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting (XSS) vulnerability in web view's OAuth app form, user authorization prompt web view…

Priority P4 26 medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting (XSS) vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth Client's name will cause users interacting with it will execute payload. This attack appear to be exploitable via The victim must be tricked to click an opaque link to the web view that runs the XSS payload. A malicious version virtually indistinguishable from a normal link.. This vulnerability appears to have been fixed in 4.2.6, 4.3.0.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	ruby-doorkeeper	< ruby-doorkeeper 4.3.1-1 (bookworm)	ruby-doorkeeper 4.3.1-1 (bookworm)
doorkeeper_project	doorkeeper	>= 2.1.0 < 4.2.6	4.2.6
doorkeeper_project	doorkeeper	2.1.0 – 4.2.5	—

CVSS provenance

nvd v3.0 6.1 MEDIUM CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:P/A:N

osv 9.1 CRITICAL

vendor_ubuntu 9.1 CRITICAL

vendor_debian 6.1 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79