High severity7.5NVD Advisory· Published Jul 13, 2018· Updated Jun 17, 2026
CVE-2018-1000211
CVE-2018-1000211
Description
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
doorkeeperRubyGems | >= 4.2.0, < 4.4.0 | 4.4.0 |
Affected products
1Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-694m-jhr9-pf77ghsaADVISORY
- github.com/doorkeeper-gem/doorkeeper/issues/891nvdThird Party AdvisoryWEB
- github.com/doorkeeper-gem/doorkeeper/pull/1119nvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-1000211ghsaADVISORY
News mentions
0No linked articles in our index yet.