Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-1000211 →
DEBIAN-CVE-2018-1000211
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Ac...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ruby-doorkeeper
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-1"}]}]
Debian:13
ruby-doorkeeper
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-1"}]}]
Debian:14
ruby-doorkeeper
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-1"}]}]
Références
- advisory security-tracker.debian.org