3 matches found
EUVD-2025-202403
Keycloak Admin REST Representational State Transfer API does not properly enforce permissions...
2.7CVSS6.4AI score0.00351EPSS
SaveExploits0References4
GHSA-6Q37-7866-H27J Keycloak Admin REST (Representational State Transfer) API does not properly enforce permissions
A flaw was found in Keycloak Admin REST Representational State Transfer API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/realm/roles endpoint...
2.7CVSS6AI score0.00351EPSS
SaveExploits0References7
CVE-2025-14082
A flaw was found in Keycloak Admin REST Representational State Transfer API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/realm/roles endpoint...
2.7CVSS5.8AI score0.00351EPSS
SaveExploits0References5
20