155 matches found
Keycloak vulnerable to information disclosure through arbitrary filesystem path probing
Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths,...
4.9CVSS5.9AI score0.0078EPSS
SaveExploits0References9Affected Software1
20