Doorkeeper · Doorkeeper · CVE-2014-8144
**Name of the Vulnerable Software and Affected Versions**
doorkeeper versions prior to 1.4.1
**Description**
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of victims for requests that read a user OAuth authorization code.
**Recommendations**
For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issue.