What is GHSA-685w-vc84-wxcx?

GHSA-685w-vc84-wxcx is a security advisory published by GitHub Security Advisories with Medium severity. Doorkeeper vulnerable to Cross-site Request Forgery

Which CVE IDs does GHSA-685w-vc84-wxcx cover?

GHSA-685w-vc84-wxcx covers the following CVE IDs: CVE-2014-8144. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-685w-vc84-wxcx?

GHSA-685w-vc84-wxcx affects 1 product, including: rubygems/doorkeeper:\u003c 1.4.1.

GHSA-685w-vc84-wxcxMedium

Doorkeeper vulnerable to Cross-site Request Forgery

Vendor

GitHub Security Advisories

Published

September 17, 2018

Last Modified

April 14, 2025

🔗 CVE IDs covered (1)

CVE-2014-8144 →

📋 Description

Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors.

🎯 Affected products1

rubygems/doorkeeper:< 1.4.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2014-8144
https://exchange.xforce.ibmcloud.com/vulnerabilities/99342
https://github.com/doorkeeper-gem/doorkeeper/blob/master/CHANGELOG.md
http://seclists.org/oss-sec/2014/q4/1076
https://github.com/advisories/GHSA-685w-vc84-wxcx