Vulnerability Details CVE-2018-1000211
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 72.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2018-1000211
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.1.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.1.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.2.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.3.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.3.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.3.2
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.3.3
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.3.4
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.4.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.4.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.4.2
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.5.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.6.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.6.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.6.2
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.6.3
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.6.4
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.6.5
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.6.6
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.6.7
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.7.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.7.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.7.2
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.7.3
-
cpe:2.3:a:doorkeeper_project:doorkeeper:0.7.4
-
cpe:2.3:a:doorkeeper_project:doorkeeper:1.0.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:1.1.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:1.2.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:1.3.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:1.3.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:1.4.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:1.4.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:1.4.2
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.0.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.0.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.1.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.1.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.1.2
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.1.3
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.1.4
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.2.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.2.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:2.2.2
-
cpe:2.3:a:doorkeeper_project:doorkeeper:3.0.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:3.0.1
-
cpe:2.3:a:doorkeeper_project:doorkeeper:3.1.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:4.0.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:4.1.0
-
cpe:2.3:a:doorkeeper_project:doorkeeper:4.2.0