Junglewise Threat Intelligence

CVE-2019-9837: Doorkeeper-openid_connect contains Open Redirect

CVE-2019-9837 · Severity: low · CVSS 3 · Published 2019-03-25

Technologies: doorkeeper-openid_connect (RubyGems). Vendors: RubyGems.

Executive brief

Doorkeeper-openid_connect contains Open Redirect

Affected products

RubyGems doorkeeper-openid_connect

Related threats

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's client_i