Gitlab Oauth sign-in component improper authorization vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository , which has features similar to Github , you can access the project's file content , commit history , bug lists , etc. GitLab Community Edition CE is...

UBUNTU-CVE-2018-1000088

Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting XSS vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth Client's name will cause users interacting with it will execute payload. This attack appear to be...

OAuth 2.0 Third-Party Account Shortcut Login Authorization Hijacking Vulnerability

OAuth Open Authorization is an open web standard for authorization that allows a user to authorize a third-party mobile application to access information that the authorized user has stored on another service provider without having to give the username and password to the third-party mobile...

keycloak: resource privilege extension via access token in oauth

It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the authentication server, permitting indefinite usage in the case of permission revocation. An attacker on an already compromised resource could use this flaw to grant himself...

DEBIAN-CVE-2016-6582

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

Doorkeeper Security Bypass Vulnerability

doorkeeper is based on the Ruby language open source Web application framework in the OAuth 2 Open Authorization Protocol provider . A security bypass vulnerability exists in Doorkeeper. The vulnerability allows attackers to bypass security restrictions and perform unauthorized actions...