1 matches found
Insecure Token Validation
keycloak-services is vulnerable to Insecure Token validation. The vulnerability exists because the verifyToken function in ClientRegistrationTokenUtils.java does not properly validate the client tokens for possible revocations in its client credential flow, allowing an attacker to access or modif...
3.8CVSS6.7AI score0.00466EPSS
SaveExploits0References5Affected Software2
20