Lucene search
Veracode Vulnerability DatabaseVERACODE:4325HistoryMay 30, 2017 - 6:09 a.m.
Cross-site Scripting (XSS)
2017-05-3006:09:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
50.3%
doorkeeper is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary javascript via the authorizations and applications view forms.
| CPE | Name | Operator | Version |
|---|---|---|---|
| doorkeeper | le | 4.2.5 |
Related
cvelist
cvelist
CVE-2018-1000088
2018-03-13 15:00:00
nvd
nvd
CVE-2018-1000088
2018-03-13 15:29:01
debiancve
debiancve
CVE-2018-1000088
2018-03-13 15:29:01
osv
osv
CVE-2018-1000088
2018-03-13 15:29:01
Doorkeeper is vulnerable to stored XSS and code execution
2018-03-13 20:44:48
prion
prion
Cross site scripting
2018-03-13 15:29:00
github
github
Doorkeeper is vulnerable to stored XSS and code execution
2018-03-13 20:44:48
cve
cve
CVE-2018-1000088
2018-03-13 15:29:01
ubuntucve
ubuntucve
CVE-2018-1000088
2018-03-13 00:00:00
rubygems
rubygems
Doorkeeper gem has stored XSS on authorization consent view
2018-02-20 21:00:00