4678 matches found
Insufficient Session Expiration
Apache Camel Keycloak Component is vulnerable to Insufficient Session Expiration. The vulnerability is due to KeycloakSecurityHelper.parseAndVerifyAccessToken omitting the TokenVerifier.ISACTIVE check, allowing expired or not-yet-valid access tokens to pass signature, subject, and issuer validati...
9.8CVSS5.3AI score0.00426EPSS
SaveExploits1References2Affected Software1
20