{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-03T00:41:57.716","vulnerabilities":[{"cve":{"id":"CVE-2018-1000211","sourceIdentifier":"cve@mitre.org","published":"2018-07-13T18:29:00.443","lastModified":"2026-06-17T01:32:41.607","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry."},{"lang":"es","value":"Doorkeeper en versiones 4.2.0 y posteriores contiene una vulnerabilidad de control de acceso incorrecto en el método autorizado de la API de revocación de tokens que puede resultar en que los tokens de acceso no se revocan para las aplicaciones públicas de OAuth, filtrando el acceso hasta que expiran."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:doorkeeper_project:doorkeeper:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.0","matchCriteriaId":"7D31753A-773E-43B2-B53E-7C293E278617"}]}]}],"references":[{"url":"https://github.com/doorkeeper-gem/doorkeeper/issues/891","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/doorkeeper-gem/doorkeeper/pull/1119","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/doorkeeper-gem/doorkeeper/issues/891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/doorkeeper-gem/doorkeeper/pull/1119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}