what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from Justin Bull

MediaWiki OAuth2 Client 0.3 Cross Site Request Forgery

Posted Aug 19, 2019

Authored by Justin Bull

MediaWiki OAuth2 Client version 0.3 suffers from a cross site request forgery vulnerability.

tags | advisory, csrf

advisories | CVE-2019-15150

SHA-256 | 6e48cd8cf1d9a26b8a4e22f9f4f28eff68bfe3e70f0be93be0515ac11022f598

Download | Favorite | View

Doorkeeper 4.3.2 / 5.0.0.rc1 Token Revocation

Posted Jul 17, 2018

Authored by Justin Bull, Roberto Ostinelli

Doorkeeper versions 4.2.0 through 4.3.2 and 5.0.0.rc1 suffer from a token revocation vulnerability.

tags | advisory

advisories | CVE-2018-1000211

SHA-256 | 08ac87e1b829431db9b341f770173cc5f495a8851d19ff3fee5a5def79fd3e39

Download | Favorite | View

Doorkeeper 4.2.5 Cross Site Scripting

Posted Feb 24, 2018

Authored by Justin Bull, Gauthier Monserand

Doorkeeper versions 2.1.0 through 4.2.5 suffer from a persistent cross site scripting vulnerability.

tags | advisory, xss

advisories | CVE-2018-1000088

SHA-256 | 7ae405fe82bf2185d906cf752401f0a6950a07a07263872a1063cce7274430f4

Download | Favorite | View

Doorkeeper 4.1.0 Token Revocation

Posted Aug 19, 2016

Authored by Justin Bull, Jonathan Clem

Doorkeeper version 4.1.0 failed to implement OAuth version 2.0 token revocation correctly.

tags | advisory

advisories | CVE-2016-6582

SHA-256 | e5400f0adaf19e6cdbfd6429e1d23cd733abae609b0b8e7f6924122f5a7731f2

Download | Favorite | View