Authentication Policy Bypass

org.keycloak, keycloak-services is vulnerable to an authentication policy bypass. The vulnerability is due to improper evaluation of the client state during client updates, which allows an attacker with client management permissions to create a public client and subsequently update it to a...