Lucene search
+L

1 matches found

Veracode
Veracode
added 2023/01/16 3:38 p.m.24 views

Insecure Token Validation

keycloak-services is vulnerable to Insecure Token validation. The vulnerability exists because the verifyToken function in ClientRegistrationTokenUtils.java does not properly validate the client tokens for possible revocations in its client credential flow, allowing an attacker to access or modif...

3.8CVSS6.7AI score0.00466EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder