EUVD-2018-0181

Malware in sbrugna...

CVE-2018-1000088

Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting XSS vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth Client's name will cause users interacting with it will execute payload. This attack appear to be...

CVE-2018-1000088: Improper Neutralization of Input During Web Page Generation

Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting XSS vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth Client's name will cause users interacting with it will execute payload. This attack appear to be...

PT-2018-9267

Name of the Vulnerable Software and Affected Versions: Doorkeeper versions 2.1.0 through 4.2.5 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the web view's OAuth app form and user authorization prompt web view. This can result in Stored XSS on the OAuth Client's...