2 matches found
org.keycloak.protocol.services: Keycloak hostname verification
A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended...
8.2CVSS5.7AI score0.00439EPSS
SaveExploits0References6
GHSA-R934-W73G-V4P8 Duplicate Advisory: Keycloak hostname verification
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hw58-3793-42gg. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is...
8.2CVSS5.7AI score
SaveExploits0References8
20