Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:55:22 +0000 cnvd-2021-45282 https://cve.radiocsirt.org/vuln/cnvd-2021-45282 cnvd-2021-45282 https://cve.radiocsirt.org/vuln/cnvd-2021-45282 EUVD-2026-42405 https://cve.radiocsirt.org/vuln/euvd-2026-42405 EUVD-2026-42405 https://cve.radiocsirt.org/vuln/euvd-2026-42405 fkie_cve-2020-14389 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14389 <p>It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.</p> <p>It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14389 GHSA-c9x9-xv66-xp3v — Improper privilege management in Keycloak https://cve.radiocsirt.org/vuln/ghsa-c9x9-xv66-xp3v <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>A flaw was found in Keycloak, where it would permit a user with a view-profile role to manage the resources in the new account console. This flaw allows a user with a view-profile role to access and modify data for which the user does not have adequate permission.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>A flaw was found in Keycloak, where it would permit a user with a view-profile role to manage the resources in the new account console. This flaw allows a user with a view-profile role to access and modify data for which the user does not have adequate permission.</p> https://cve.radiocsirt.org/vuln/ghsa-c9x9-xv66-xp3v gsd-2020-14389 https://cve.radiocsirt.org/vuln/gsd-2020-14389 gsd-2020-14389 https://cve.radiocsirt.org/vuln/gsd-2020-14389 RHSA-2020:4929 — Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 6 https://cve.radiocsirt.org/vuln/rhsa-2020:4929 <p>keycloak: OIDC redirect_uri allows dangerous schemes resulting in potential XSS keycloak: user can manage resources with just &#34;view-profile&#34; role using new Account Console</p> <p>keycloak: OIDC redirect_uri allows dangerous schemes resulting in potential XSS keycloak: user can manage resources with just &#34;view-profile&#34; role using new Account Console</p> https://cve.radiocsirt.org/vuln/rhsa-2020:4929