~/products/doorkeeper-gem/doorkeeper

pipeline liveDigest Docs

Doorkeeper-Gem Doorkeeper vulnerabilities

1 known vulnerability affecting doorkeeper-gem/doorkeeper.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2023-34246P3MEDIUMCVSS 6.5fixed in 5.6.62023-06-12

CVE-2023-34246 [MEDIUM] CWE-287 CVE-2023-34246: Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper auto Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.