Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-1000211
5
MEDIUMCVSS v2
Published
July 13, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.
doorkeeper-gem/doorkeeper
GitHubDoorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
GitHubDoorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.<= 4.2.0, >= 4.2.0, < 4.4.0NVD