Every CVE Search/ Get API key

CVE-2023-34246

Doorkeeper Improper Authentication vulnerability

4.2 MediumFix available

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

0.72%Up 0.7 points since Jun 13, 2023
90%50%10%1%

What each source reports

CVE List Score used 4.2

Doorkeeper Improper Authentication vulnerability

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

Record
CVE-2023-34246
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-287
Updated
2026-11-02
EUVDEUVD-2023-1739 4.2

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

Record
EUVD-2023-1739
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-7w2c-w47h-789w 4.2

Doorkeeper Improper Authentication vulnerability

OAuth RFC 8252 says https://www.rfc-editor.org/rfc/rfc8252#section-8.6

the authorization server SHOULD NOT process authorization requests automatically without user consent or interaction, except when the identity of the client can be assured. This includes the case where the user has previously approved an authorization request for a given client id

But Doorkeeper automatically processes authorization requests without user consent for public clients that have been previously approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured.

Issue https://github.com/doorkeeper-gem/doorkeeper/issues/1589

Fix https://github.com/doorkeeper-gem/doorkeeper/pull/1646

Record
GHSA-7w2c-w47h-789w
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-287
Updated
2026-11-02
NVD 4.2

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

Record
CVE-2023-34246
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-287
Updated
2026-11-02
OSV 4.2

Doorkeeper Improper Authentication vulnerability

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

Record
CVE-2023-34246
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-287
Updated
2026-11-02
OSVDEBIAN-CVE-2023-34246 6.5

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

Record
DEBIAN-CVE-2023-34246
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVGHSA-7w2c-w47h-789w 4.2

Doorkeeper Improper Authentication vulnerability

OAuth RFC 8252 says https://www.rfc-editor.org/rfc/rfc8252#section-8.6

the authorization server SHOULD NOT process authorization requests automatically without user consent or interaction, except when the identity of the client can be assured. This includes the case where the user has previously approved an authorization request for a given client id

But Doorkeeper automatically processes authorization requests without user consent for public clients that have been previously approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured.

Issue https://github.com/doorkeeper-gem/doorkeeper/issues/1589

Fix https://github.com/doorkeeper-gem/doorkeeper/pull/1646

Record
GHSA-7w2c-w47h-789w
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-287
Updated
2026-11-02
OSVUBUNTU-CVE-2023-34246 6.5

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.

Record
UBUNTU-CVE-2023-34246
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVUSN-6210-1 No score

ruby-doorkeeper vulnerability

It was discovered that Doorkeeper incorrectly performed authorization checks for public clients that have been previous approved. An attacker could potentially exploit these in order to impersonate another user and obtain sensitive information.

Record
USN-6210-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
doorkeeper
RubyGems
 before 5.6.6
5.6.6
ruby-doorkeeper
Debian:12
 before 5.5.0-2+deb12u1, plus listed versions
5.5.0-2
5.5.0-2+deb12u1
ruby-doorkeeper
Debian:13
 before 5.6.6-2
5.6.6-2
ruby-doorkeeper
Debian:14
 before 5.6.6-2
5.6.6-2
ruby-doorkeeper
Debian:10
 before 4.4.2-1+deb10u1, plus listed versions
4.4.2-1
4.4.2-1+deb10u1
ruby-doorkeeper
Debian:11
 before 5.3.0-2+deb11u1, plus listed versions
5.3.0-2
5.3.0-2+deb11u1
doorkeeper
RubyGems
 before 5.6.6, plus listed versions
0.1.00.1.10.2.00.3.00.3.1
Show 45 moreShow less
0.3.20.3.30.3.40.4.00.4.10.4.20.5.00.5.0.rc10.6.00.6.0.rc10.6.10.6.20.6.30.6.40.6.50.6.60.6.70.7.00.7.10.7.20.7.30.7.41.0.01.0.0.rc11.0.0.rc21.1.01.2.01.3.01.3.11.4.01.4.11.4.22.0.02.0.0.alpha12.0.0.rc22.0.0.rc32.0.12.1.02.1.12.1.22.1.32.1.42.2.02.2.12.2.2
5.6.6
ruby-doorkeeper
Ubuntu:Pro:16.04:LTS
 before 2.2.1-1ubuntu0.1~esm1, plus listed versions
2.2.1-1
2.2.1-1ubuntu0.1~esm1
ruby-doorkeeper
Ubuntu:Pro:18.04:LTS
 before 4.3.1-1ubuntu0.1~esm1, plus listed versions
4.2.0-34.3.1-1
4.3.1-1ubuntu0.1~esm1
ruby-doorkeeper
Ubuntu:20.04:LTS
 before 5.0.2-2ubuntu0.1, plus listed versions
4.4.2-15.0.2-2
5.0.2-2ubuntu0.1
ruby-doorkeeper
Ubuntu:22.04:LTS
 before 5.5.0-2ubuntu0.22.04.1, plus listed versions
5.3.0-25.5.0-2
5.5.0-2ubuntu0.22.04.1

History

History
RecordedChangedSources
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-34246 is a medium vulnerability (CVSS 4.2) in Doorkeeper-gem Doorkeeper, published June 12, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.72%, the 53rd percentile. Fixed in doorkeeper 5.6.6.

References

Show 10 moreShow less
This page doesn't list everything

Left out here: 64 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open