Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-8144
6.8
MEDIUMCVSS v2
Published
December 31, 2014
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors.
doorkeeper-gem/doorkeeper
GitHubDoorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
GitHubDoorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.<= 1.4.0, < 1.4.1NVD