GHSA-vv4c-g6q7-p3q7

    Dashboard / Vulnerabilities / GHSA-vv4c-g6q7-p3q7

    GHSA-vv4c-g6q7-p3q7

    Published: 25 Mar 2019Last Modified: 8 Nov 2023
    Aliases:
    CVE-2019-9837

    Summary: Doorkeeper-openid_connect contains Open Redirect

    Details: Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that results in an error response) with the 'openid' scope and a prompt=none value. This allows phishing attacks against the authorization flow.

    References: https://nvd.nist.gov/vuln/detail/CVE-2019-9837, https://github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/61, https://github.com/doorkeeper-gem/doorkeeper-openid_connect/pull/66, https://github.com/doorkeeper-gem/doorkeeper-openid_connect, https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md

    Affected packages

    Package

    Name: doorkeeper-openid_connect

    Purl: pkg:gem/doorkeeper-openid_connect

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 1.4.0
    Fixed -1.5.4

    Affected versions

    1.4.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High