high7.5
CVE-2018-1000211
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access toke…
Impact
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Doorkeeper Project | Doorkeeper | through 4.2.0 |