Most recent entries from all

cnvd-2019-36985

2026-10-03T02:35:45.118352+00:00

cnvd-2019-36985

EUVD-2026-56664

2026-10-03T02:35:45.118390+00:00

EUVD-2026-56664

fkie_cve-2019-14832

2026-10-03T02:35:45.118405+00:00

A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks.

GHSA-8prc-58j4-m55q — Keycloak Unauthenticated Access

2026-10-03T02:35:45.118434+00:00

Affected: Maven: org.keycloak:keycloak-model-infinispan, Maven: org.keycloak:keycloak-model-jpa

A flaw was found in the Keycloak REST API before version 8.0.0, implemented in Keycloak before 7.0.1 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks.

gsd-2019-14832

2026-10-03T02:35:45.118458+00:00

gsd-2019-14832

RHSA-2019:3044 — Red Hat Security Advisory: Red Hat Single Sign-On 7.3.4 security update on RHEL 6

2026-10-03T02:35:45.118470+00:00

undertow: Information leak in requests for directories without trailing slashes jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. jackson-databind: default typing mishandling leading to remote code execution keycloak: adapter endpoints are exposed via arbitrary URLs keycloak: cross-realm user access auth bypass