Lucene search

K
osvGoogleOSV:USN-6210-1
HistoryJul 07, 2023 - 3:14 p.m.

ruby-doorkeeper vulnerability

2023-07-0715:14:15
Google
osv.dev
3
doorkeeper
vulnerability
authorization checks
approved clients
user impersonation
sensitive information

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%

It was discovered that Doorkeeper incorrectly performed authorization checks
for public clients that have been previous approved. An attacker could
potentially exploit these in order to impersonate another user and obtain
sensitive information.

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%