28703 matches found
GHSA-9JRW-8XF7-XQHQ Keycloak vulnerable to information disclosure through arbitrary filesystem path probing
Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths,...
4.9CVSS5.9AI score0.0078EPSS
SaveExploits0References9
20