{"id":"GHSA-7w2c-w47h-789w","summary":"Doorkeeper Improper Authentication vulnerability","details":"OAuth RFC 8252 says  https://www.rfc-editor.org/rfc/rfc8252#section-8.6\n\n\u003e the authorization server SHOULD NOT process authorization requests automatically without user consent or interaction, except when the identity of the client can be assured. **This includes the case where the user has previously approved an authorization request for a given client id**\n\nBut Doorkeeper automatically processes authorization requests without user consent for public clients that have been previously approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured.\n\nIssue https://github.com/doorkeeper-gem/doorkeeper/issues/1589\n\nFix https://github.com/doorkeeper-gem/doorkeeper/pull/1646","aliases":["CVE-2023-34246"],"modified":"2026-09-10T03:50:02.187700390Z","published":"2023-06-12T19:50:34Z","database_specific":{"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2023-06-12T19:50:34Z","nvd_published_at":"2023-06-12T17:15:09Z","cwe_ids":["CWE-287"]},"references":[{"type":"WEB","url":"https://github.com/doorkeeper-gem/doorkeeper/security/advisories/GHSA-7w2c-w47h-789w"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34246"},{"type":"WEB","url":"https://github.com/doorkeeper-gem/doorkeeper/issues/1589"},{"type":"WEB","url":"https://github.com/doorkeeper-gem/doorkeeper/pull/1646"},{"type":"PACKAGE","url":"https://github.com/doorkeeper-gem/doorkeeper"},{"type":"WEB","url":"https://github.com/doorkeeper-gem/doorkeeper/releases/tag/v5.6.6"},{"type":"WEB","url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doorkeeper/CVE-2023-34246.yml"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00016.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00010.html"},{"type":"WEB","url":"https://www.rfc-editor.org/rfc/rfc8252#section-8.6"}],"affected":[{"package":{"name":"doorkeeper","ecosystem":"RubyGems","purl":"pkg:gem/doorkeeper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.6"}]}],"versions":["0.1.0","0.1.1","0.2.0","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","0.4.0","0.4.1","0.4.2","0.5.0","0.5.0.rc1","0.6.0","0.6.0.rc1","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.7.0","0.7.1","0.7.2","0.7.3","0.7.4","1.0.0","1.0.0.rc1","1.0.0.rc2","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.4.1","1.4.2","2.0.0","2.0.0.alpha1","2.0.0.rc2","2.0.0.rc3","2.0.1","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.2.0","2.2.1","2.2.2","3.0.0","3.0.0.rc1","3.0.0.rc2","3.0.1","3.1.0","4.0.0","4.0.0.rc1","4.0.0.rc2","4.0.0.rc3","4.0.0.rc4","4.1.0","4.2.0","4.2.5","4.2.6","4.3.0","4.3.1","4.3.2","4.4.0","4.4.1","4.4.2","4.4.3","5.0.0","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.2","5.0.3","5.1.0","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.2.0","5.2.0.rc1","5.2.0.rc2","5.2.0.rc3","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.3.0","5.3.1","5.3.2","5.3.3","5.4.0","5.4.0.rc1","5.4.0.rc2","5.5.0","5.5.0.rc1","5.5.0.rc2","5.5.1","5.5.2","5.5.3","5.5.4","5.6.0","5.6.0.rc1","5.6.0.rc2","5.6.1","5.6.2","5.6.3","5.6.4","5.6.5"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-7w2c-w47h-789w/GHSA-7w2c-w47h-789w.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"}]}