Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
doorkeeper project doorkeeper |