CVE-2023-0657 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2023-0657 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2023-0657

creationtimestamp| type| source ---|---|--- 2024-11-17 10:25:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113497810108556154 2024-11-17 12:56:57+00:00| seen| https://t.me/cvedetector/11257...

CVE-2023-0657

The CVE-2023-0657 entries concern Keycloak, where a flaw is described as improper enforcement of token types when validating signatures locally. This could let an authenticated attacker exchange a logout token for an access token, potentially accessing data outside of enforced permissions. The co...