Lucene search

K
osvGoogleOSV:CVE-2020-14366
HistoryNov 09, 2020 - 5:15 p.m.

CVE-2020-14366

2020-11-0917:15:12
Google
osv.dev
5

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.4%

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.4%