modules:
  - module: github.com/ory/fosite
    versions:
      - fixed: 0.34.0
    vulnerable_at: 0.33.0
    packages:
      - package: github.com/ory/fosite/handler/oauth2
        symbols:
          - TokenRevocationHandler.RevokeToken
description: |
    Due to improper error handling, an error with the underlying token storage may cause a user
    to believe a token has been successfully revoked when it is in fact still valid. An attackers
    ability to exploit this relies on an ability to trigger errors in the underlying storage.
published: 2021-07-28T18:08:05Z
cves:
  - CVE-2020-15223
ghsas:
  - GHSA-7mqr-2v3q-v2wm
references:
  - fix: https://github.com/ory/fosite/commit/03dd55813f5521985f7dd64277b7ba0cf1441319