OSVDB-118830: Sensitive information in production logs

February 10, 2015

The program stores sensitive information in production logs. This may allow a local attacker to gain access to sensitive information.

References

www.osvdb.com/show/osvdb/118830
github.com/apsoto/doorkeeper/commit/ff434bb8fc49e132bff4d0f974ee0c1a8a69c143
github.com/doorkeeper-gem/doorkeeper/commit/d6bca5f32b741b8cee83a4aeb818338b919181fe
github.com/doorkeeper-gem/doorkeeper/issues/576

Code Behaviors & Features

Detect and mitigate OSVDB-118830 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →