GHSA-9JRW-8XF7-XQHQ Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths,...

Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths,...

keycloak: Keycloak: Information disclosure through arbitrary filesystem path probing

A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths, determining...

Duplicate Advisory: Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9jrw-8xf7-xqhq. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by...

CVE-2026-9083 Keycloak: keycloak: information disclosure through arbitrary filesystem path probing

A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths, determining...