CVE-2019-14820

It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information...

PT-2020-9607

Name of the Vulnerable Software and Affected Versions Keycloak versions prior to 8.0.0 Description The issue allows an attacker to access unauthorized information by invoking internal adapter endpoints in org.keycloak.constants.AdapterConstants via a specially-crafted URL. Recommendations For...