Lucene search
Veracode Vulnerability DatabaseVERACODE:27635HistoryOct 21, 2020 - 4:49 a.m.
Token Validation Bypass
2020-10-2104:49:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
token validation
bypass
storefront api
expired user tokens
EPSS
0.001
Percentile
50.8%
spree_api is vulnerable to token validation bypass. Failure to check for the expiry of the doorkeeper_token allows an attacker to access Storefront API v2 endpoints using expired user tokens.
Related
prion
prion
Code injection
2020-10-20 21:15:00
osv
osv
Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls
2020-10-20 20:03:52
CVE-2020-15269
2020-10-20 21:15:12
rubygems
rubygems
nvd
nvd
CVE-2020-15269
2020-10-20 21:15:12
cvelist
cvelist
CVE-2020-15269 Expired token reuse in Spree
2020-10-20 20:15:14
github
github
cve
cve
CVE-2020-15269
2020-10-20 21:15:12