3334 matches found
keycloak-services: keycloak-services: OIDC DCR read-modify-write silently disables offline token revocation
A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...
4.3CVSS5.7AI score0.00158EPSS
SaveExploits0References4
20