Vulnerabilities > Doorkeeper Project > Doorkeeper > 0.3.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-12 | CVE-2023-34246 | Unspecified vulnerability in Doorkeeper Project Doorkeeper Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. | 6.5 |
| 2018-07-13 | CVE-2018-1000211 | Incorrect Permission Assignment for Critical Resource vulnerability in Doorkeeper Project Doorkeeper Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry. | 7.5 |
| 2017-01-23 | CVE-2016-6582 | 7PK - Security Features vulnerability in Doorkeeper Project Doorkeeper The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification. | 9.1 |