CVE-2018-1000211
13.07.2018, 18:29
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.Enginsight
| Vendor | Product | Version |
|---|---|---|
| doorkeeper_project | doorkeeper | 𝑥 ≤ 4.2.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ruby-doorkeeper |
|
Common Weakness Enumeration