Doorkeeper
Approved changes feed: RSS · Atom
cpe:2.3:a:doorkeeper-gem:doorkeeper:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Doorkeeper Gem (8f579c38-7ef2-5d1c-94a2-80390d8fd60a) |
|---|---|
| Product | Doorkeeper (ad3f66be-b4c6-58e0-8851-93ce06dbccbe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-34246 |
vulnerable | 2026-06-08 06:06:24.935753 |
Doorkeeper Improper Authentication vulnerability
MEDIUM (4.2)
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.
Published: 2023-06-12T16:33:05.704Z
Updated: 2025-02-13T16:55:25.344Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.