2018-07-13 18:00:00
mitre
PUBLISHED
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation APIs authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.