Lucene search
+L

28703 matches found

osv_ghsa
osv_ghsa
•added 2026/10/29 4:38 p.m.•3 views

GHSA-9JRW-8XF7-XQHQ Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths,...

4.9CVSS5.9AI score0.0078EPSS
SaveExploits0References9
Rows per page
Query Builder