https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:31:04 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-62483 cnvd-2020-62483 https://cve.radiocsirt.org/vuln/cnvd-2020-62483 https://cve.radiocsirt.org/vuln/euvd-2026-42392 EUVD-2026-42392 https://cve.radiocsirt.org/vuln/euvd-2026-42392 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14366 <p>A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw</p> <p>A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14366 https://cve.radiocsirt.org/vuln/ghsa-cp67-8w3w-6h9c <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-parent</p> <p>A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-parent</p> <p>A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw</p> https://cve.radiocsirt.org/vuln/ghsa-cp67-8w3w-6h9c https://cve.radiocsirt.org/vuln/gsd-2020-14366 gsd-2020-14366 https://cve.radiocsirt.org/vuln/gsd-2020-14366 https://cve.radiocsirt.org/vuln/rhsa-2020:4931 <p>cxf: JMX integration is vulnerable to a MITM attack keycloak: OIDC redirect_uri allows dangerous schemes resulting in potential XSS picketbox: JBoss EAP reload to admin-only mode allows authentication bypass wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS keycloak: path traversal in resources keycloak: user can manage resources with just &#34;view-profile&#34; role using new Account Console</p> <p>cxf: JMX integration is vulnerable to a MITM attack keycloak: OIDC redirect_uri allows dangerous schemes resulting in potential XSS picketbox: JBoss EAP reload to admin-only mode allows authentication bypass wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS keycloak: path traversal in resources keycloak: user can manage resources with just &#34;view-profile&#34; role using new Account Console</p> https://cve.radiocsirt.org/vuln/rhsa-2020:4931