PT-2018-9267 · Doorkeeper+1 · Doorkeeper+1

F3Ndot · Publicado 2018-03-13 · Atualizado 2025-03-31 · CVE-2018-1000088

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Doorkeeper versions 2.1.0 through 4.2.5

Description: The issue is related to a Cross Site Scripting (XSS) vulnerability in the web view's OAuth app form and user authorization prompt web view. This can result in Stored XSS on the OAuth Client's name, causing users interacting with it to execute a payload. The attack is exploitable via tricking the victim into clicking an opaque link to the web view that runs the XSS payload, which is virtually indistinguishable from a normal link.

Recommendations: For versions 2.1.0 through 4.2.5, update to version 4.2.6 or 4.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the OAuth app form and user authorization prompt web view until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-1000088

GHSA-HWHH-2FWM-CFGW

USN-7394-1

Produtos afetados

Doorkeeper

Ubuntu

Referências · 19

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doorkeeper/CVE-2018-1000088.yml · Exploit
• https://github.com/doorkeeper-gem/doorkeeper/releases/tag/v4.3.0 · Nota
• https://github.com/doorkeeper-gem/doorkeeper/issues/969 · Nota
• https://github.com/doorkeeper-gem/doorkeeper/pull/970 · Nota
• https://github.com/doorkeeper-gem/doorkeeper/commit/7b1a8373ecd69768c896000c7971dbf48948c1b5 · Nota
• https://github.com/doorkeeper-gem/doorkeeper · Nota
• https://github.com/rubysec/ruby-advisory-db/pull/328/files · Nota
• https://osv.dev/vulnerability/CVE-2018-1000088 · Aviso do Fabricante
• https://blog.justinbull.ca/cve-2018-1000088-stored-xss-in-doorkeeper · Nota
• https://ubuntu.com/security/CVE-2016-6582 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-hwhh-2fwm-cfgw · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-1000088 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000088 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1000088 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000088 · Nota de Segurança