Lucene search

K
osvGoogleOSV:GHSA-CP67-8W3W-6H9C
HistoryFeb 09, 2022 - 12:58 a.m.

Path Traversal

2022-02-0900:58:03
Google
osv.dev
22
keycloak
path traversal
vulnerability

EPSS

0.002

Percentile

54.3%

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

EPSS

0.002

Percentile

54.3%

Related for OSV:GHSA-CP67-8W3W-6H9C