Lucene search
+L

155 matches found

Github Security Blog
Github Security Blog
•added 2026/10/29 4:38 p.m.•1 views

Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths,...

4.9CVSS5.9AI score0.0078EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder