Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/04/17 5:33 p.m.44 views

Keycloak Authorization Bypass vulnerability

Due to a permissive regular expression hardcoded for filtering allowed hosts to register a dynamic client, a malicious user with enough information about the environment could benefit and jeopardize an environment with this specific Dynamic Client Registration with TrustedDomain configuration...

5.4CVSS6.7AI score0.01075EPSS
SaveExploits0References12Affected Software1
Rows per page
Query Builder