CVE-2021-20202

CVE-2021-20202 affects Keycloak. A flaw allows a local attacker to create temporary-directory paths before the Java process, with broader permissions, enabling access to data stored by Keycloak in that directory. Public advisories (GHSA, OSV, NVD, Reddit/RH) describe the same issue and note local...