Vulnerabilities > CVE-2023-34246 - Unspecified vulnerability in Doorkeeper Project Doorkeeper

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

doorkeeper-project

NVD

Published: 2023-06-12

Updated: 2024-12-09

Summary

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

Vulnerable Configurations

Part	Description	Count
Application	Doorkeeper_Project Doorkeeper Project Doorkeeper 0.1.0 Doorkeeper Project Doorkeeper 0.1.1 Doorkeeper Project Doorkeeper 0.2.0 Doorkeeper Project Doorkeeper 0.3.0 Doorkeeper Project Doorkeeper 0.3.1 Doorkeeper Project Doorkeeper 0.3.2 Doorkeeper Project Doorkeeper 0.3.3 Doorkeeper Project Doorkeeper 0.3.4 Doorkeeper Project Doorkeeper 0.4.0 Doorkeeper Project Doorkeeper 0.4.1 Doorkeeper Project Doorkeeper 0.4.2 Doorkeeper Project Doorkeeper 0.5.0 Doorkeeper Project Doorkeeper 0.6.0 Doorkeeper Project Doorkeeper 0.6.1 Doorkeeper Project Doorkeeper 0.6.2 Doorkeeper Project Doorkeeper 0.6.3 Doorkeeper Project Doorkeeper 0.6.4 Doorkeeper Project Doorkeeper 0.6.5 Doorkeeper Project Doorkeeper 0.6.6 Doorkeeper Project Doorkeeper 0.6.7 Doorkeeper Project Doorkeeper 0.7.0 Doorkeeper Project Doorkeeper 0.7.1 Doorkeeper Project Doorkeeper 0.7.2 Doorkeeper Project Doorkeeper 0.7.3 Doorkeeper Project Doorkeeper 0.7.4 Doorkeeper Project Doorkeeper 1.0.0 Doorkeeper Project Doorkeeper 1.1.0 Doorkeeper Project Doorkeeper 1.2.0 Doorkeeper Project Doorkeeper 1.3.0 Doorkeeper Project Doorkeeper 1.3.1 Doorkeeper Project Doorkeeper 1.4.0 Doorkeeper Project Doorkeeper 1.4.1 Doorkeeper Project Doorkeeper 1.4.2 Doorkeeper Project Doorkeeper 2.0.0 Doorkeeper Project Doorkeeper 2.0.1 Doorkeeper Project Doorkeeper 2.1.0 Doorkeeper Project Doorkeeper 2.1.1 Doorkeeper Project Doorkeeper 2.1.2 Doorkeeper Project Doorkeeper 2.1.3 Doorkeeper Project Doorkeeper 2.1.4 Doorkeeper Project Doorkeeper 2.2.0 Doorkeeper Project Doorkeeper 2.2.1 Doorkeeper Project Doorkeeper 2.2.2 Doorkeeper Project Doorkeeper 3.0.0 Doorkeeper Project Doorkeeper 3.0.1 Doorkeeper Project Doorkeeper 3.1.0 Doorkeeper Project Doorkeeper 4.0.0 Doorkeeper Project Doorkeeper 4.1.0 Doorkeeper Project Doorkeeper 4.2.0 Doorkeeper Project Doorkeeper 4.2.5 Doorkeeper Project Doorkeeper 4.2.6 Doorkeeper Project Doorkeeper 4.3.0 Doorkeeper Project Doorkeeper 4.3.1 Doorkeeper Project Doorkeeper 4.3.2 Doorkeeper Project Doorkeeper 4.4.0 Doorkeeper Project Doorkeeper 4.4.1 Doorkeeper Project Doorkeeper 4.4.2 Doorkeeper Project Doorkeeper 4.4.3 Doorkeeper Project Doorkeeper 5.0.0 Doorkeeper Project Doorkeeper 5.0.1 Doorkeeper Project Doorkeeper 5.0.2 Doorkeeper Project Doorkeeper 5.0.3 Doorkeeper Project Doorkeeper 5.1.0 Doorkeeper Project Doorkeeper 5.1.1 Doorkeeper Project Doorkeeper 5.2.0 Doorkeeper Project Doorkeeper 5.2.1 Doorkeeper Project Doorkeeper 5.2.2 Doorkeeper Project Doorkeeper 5.2.3 Doorkeeper Project Doorkeeper 5.2.4 Doorkeeper Project Doorkeeper 5.2.5 Doorkeeper Project Doorkeeper 5.3.0 Doorkeeper Project Doorkeeper 5.3.1 Doorkeeper Project Doorkeeper 5.3.2 Doorkeeper Project Doorkeeper 5.4.0 Doorkeeper Project Doorkeeper 5.5.0 Doorkeeper Project Doorkeeper 5.5.1 Doorkeeper Project Doorkeeper 5.5.2 Doorkeeper Project Doorkeeper 5.5.3 Doorkeeper Project Doorkeeper 5.5.4 Doorkeeper Project Doorkeeper 5.6.0 Doorkeeper Project Doorkeeper 5.6.1 Doorkeeper Project Doorkeeper 5.6.2 Doorkeeper Project Doorkeeper 5.6.3 Doorkeeper Project Doorkeeper 5.6.4 Doorkeeper Project Doorkeeper 5.6.5	109

Summary

Vulnerable Configurations

References