CVE-2020-10187

published 2020-05-04

CVE-2020-10187: Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the…

Priority P3 42 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply needs to request the list of their authorized applications in a JSON format (usually GET /oauth/authorized_applications.json). An application is vulnerable if the authorized applications controller is enabled.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	ruby-doorkeeper	< ruby-doorkeeper 5.0.3-1 (bookworm)	ruby-doorkeeper 5.0.3-1 (bookworm)
doorkeeper_project	doorkeeper	>= 5.0.0 < 5.0.3	5.0.3
doorkeeper_project	doorkeeper	>= 5.0.0 < 5.0.3	5.0.3
doorkeeper_project	doorkeeper	>= 5.1.0 < 5.1.1	5.1.1
doorkeeper_project	doorkeeper	>= 5.1.0 < 5.1.1	5.1.1
doorkeeper_project	doorkeeper	>= 5.2.0 < 5.2.5	5.2.5
doorkeeper_project	doorkeeper	>= 5.2.0 < 5.2.5	5.2.5
doorkeeper_project	doorkeeper	>= 5.3.0 < 5.3.2	5.3.2
doorkeeper_project	doorkeeper	>= 5.3.0 < 5.3.2	5.3.2

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:P/I:N/A:N

ghsa 7.5 HIGH

osv 7.5 HIGH

vendor_debian 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-862