Логотип exploitDog
bind:CVE-2023-34246
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-34246

Количество 4

Количество 4

ubuntu логотип

CVE-2023-34246

больше 2 лет назад

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

CVSS3: 4.2
EPSS: Низкий
nvd логотип

CVE-2023-34246

больше 2 лет назад

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

CVSS3: 4.2
EPSS: Низкий
debian логотип

CVE-2023-34246

больше 2 лет назад

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to ...

CVSS3: 4.2
EPSS: Низкий
github логотип

GHSA-7w2c-w47h-789w

больше 2 лет назад

Doorkeeper Improper Authentication vulnerability

CVSS3: 4.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-34246

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

CVSS3: 4.2
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-34246

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

CVSS3: 4.2
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-34246

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to ...

CVSS3: 4.2
0%
Низкий
больше 2 лет назад
github логотип
GHSA-7w2c-w47h-789w

Doorkeeper Improper Authentication vulnerability

CVSS3: 4.2
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу