Skip to content
fr Sign in
6.8 Medium

CVE-2020-14366 A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible…

Description

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

Affected products and versions

Product Affected versions Fixed in
keycloak Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of keycloak

The 22 CVEs of keycloak →
CVE-2020-1758 A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while… 5.3 Medium CVE-2020-1714 A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without… 7.5 High CVE-2020-1718 A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0 7.1 High CVE-2020-1724 A flaw was found in Keycloak in versions before 9.0.2 4.3 Medium
Track this CVE