4381 matches found
keycloak-services: keycloak-services: UMA scope merge across resource owners via resource name collision
A flaw was found in the User-Managed Access UMA implementation of Keycloak. The issue occurs in the authorization token endpoint when processing permission tickets. If two different users own resources with the same name, the system incorrectly merges the permissions from both resources when one...
3.5CVSS5.7AI score0.00238EPSS
SaveExploits0References4
20