Doorkeeper Improper Authentication vulnerability
GHSA-7w2c-w47h-789w · CVE-2023-34246
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
OAuth RFC 8252 says https://www.rfc-editor.org/rfc/rfc8252#section-8.6
the authorization server SHOULD NOT process authorization requests automatically without user consent or interaction, except when the identity of the client can be assured. This includes the case where the user has previously approved an authorization request for a given client id
But Doorkeeper automatically processes authorization requests without user consent for public clients that have been previously approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured.
Issue https://github.com/doorkeeper-gem/doorkeeper/issues/1589
References
- WEB https://github.com/doorkeeper-gem/doorkeeper/security/advisories/GHSA-7w2c-w47h-789w
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-34246
- WEB https://github.com/doorkeeper-gem/doorkeeper/issues/1589
- WEB https://github.com/doorkeeper-gem/doorkeeper/pull/1646
- PACKAGE https://github.com/doorkeeper-gem/doorkeeper
- WEB https://github.com/doorkeeper-gem/doorkeeper/releases/tag/v5.6.6
- WEB https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doorkeeper/CVE-2023-34246.yml
- WEB https://lists.debian.org/debian-lts-announce/2023/07/msg00016.html
- WEB https://lists.debian.org/debian-lts-announce/2024/12/msg00010.html
- WEB https://www.rfc-editor.org/rfc/rfc8252#section-8.6
Ready to move
Start Securing
Free, no credit card | First findings in minutes