RubyGems/doorkeeper CVE-2014-8144: medium, EPSS 0.65%
Doorkeeper vulnerable to Cross-site Request Forgery
Action: Upgrade doorkeeper to 1.4.1 or later.
bundle update doorkeeperAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.1 | - |
Fixed versions
| 1.4.1 |
Sources
- osv: GHSA-685w-vc84-wxcx
- https://nvd.nist.gov/vuln/detail/CVE-2014-8144
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99342
- https://github.com/doorkeeper-gem/doorkeeper
- https://github.com/doorkeeper-gem/doorkeeper/blob/master/CHANGELOG.md
- http://seclists.org/oss-sec/2014/q4/1076
CVE-2014-8144 · published · modified · JSON