CVE-2016-6582

Description

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification.

Risk Information

Base Score

9.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS Score

Exploitation Probability

1.593

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2016-6582 are fixed in Ruby-doorkeeper 4.2.0	Windows
Vulnerabilities CVE-2016-6582 are fixed in Ruby-doorkeeper for Linux 4.2.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234