1 matches found
keycloak-connect: auth token validity check ignored
It was found that the Keycloak Node.js adapter did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks...
9.8CVSS5.8AI score0.02542EPSS
SaveExploits0References4
20