{"action":"Upgrade doorkeeper to 4.2.6 or later.","affected":[{"fixed":"4.2.6","introduced":"2.1.0"}],"component":"doorkeeper","cve_ids":["CVE-2018-1000088"],"ecosystem":"RubyGems","epss":0.01428,"exploited":false,"fixed_versions":["4.2.6"],"ghsa_id":"GHSA-hwhh-2fwm-cfgw","id":"tcs_01M5KEKQ6NVQCT3N7XSDBKG28B","modified_at":"2024-02-16T08:00:57.387423Z","published_at":"2018-03-13T20:44:48Z","references":["https://osv.dev/vulnerability/GHSA-hwhh-2fwm-cfgw","https://nvd.nist.gov/vuln/detail/CVE-2018-1000088","https://github.com/doorkeeper-gem/doorkeeper/issues/969","https://github.com/doorkeeper-gem/doorkeeper/pull/970","https://github.com/rubysec/ruby-advisory-db/pull/328/files","https://github.com/doorkeeper-gem/doorkeeper/commit/7b1a8373ecd69768c896000c7971dbf48948c1b5","https://blog.justinbull.ca/cve-2018-1000088-stored-xss-in-doorkeeper","https://github.com/doorkeeper-gem/doorkeeper","https://github.com/doorkeeper-gem/doorkeeper/releases/tag/v4.3.0","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doorkeeper/CVE-2018-1000088.yml"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hwhh-2fwm-cfgw","url":"https://osv.dev/vulnerability/GHSA-hwhh-2fwm-cfgw"}],"summary":"Doorkeeper is vulnerable to stored XSS and code execution"}