Aller au contenu
4.3 Moyenne

CVE-2019-14820 It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in…

Description

It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information.

Produits et versions touchés

Produit Versions touchées Corrigé en
keycloak Versions non publiées
Les 15 CVE de keycloak →
Suivre cette CVE