2 matches found
keycloak: user impersonation via stolen uuid code
A flaw was found in Keycloak's OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issu...
5CVSS6.3AI score0.01274EPSS
SaveExploits2References4
Ransomhack; a new attack blackmailing business owners using GDPR
By Waqas Hackers are threatening companies to leak stolen user data online This is a post from HackRead.com Read the original post: Ransomhack; a new attack blackmailing business owners using GDPR...
3.6AI score
SaveExploits0
20