Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:31:49 +0000 EUVD-2026-11621 https://cve.radiocsirt.org/vuln/euvd-2026-11621 EUVD-2026-11621 https://cve.radiocsirt.org/vuln/euvd-2026-11621 fkie_cve-2022-1245 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1245 <p>A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a client to gain unauthorized access to additional services.</p> <p>A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a client to gain unauthorized access to additional services.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1245 GHSA-75p6-52g3-rqc8 — Keycloak vulnerable to privilege escalation on Token Exchange feature https://cve.radiocsirt.org/vuln/ghsa-75p6-52g3-rqc8 <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-services</p> <p>A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a client to gain unauthorized access to additional services.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-services</p> <p>A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a client to gain unauthorized access to additional services.</p> https://cve.radiocsirt.org/vuln/ghsa-75p6-52g3-rqc8 gsd-2022-1245 https://cve.radiocsirt.org/vuln/gsd-2022-1245 gsd-2022-1245 https://cve.radiocsirt.org/vuln/gsd-2022-1245 RHSA-2022:1709 — Red Hat Security Advisory: Red Hat Single Sign-On 7.5.2 security update https://cve.radiocsirt.org/vuln/rhsa-2022:1709 <p>keycloak: Privilege escalation vulnerability on Token Exchange</p> <p>keycloak: Privilege escalation vulnerability on Token Exchange</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1709 WID-SEC-W-2024-0794 — Dell ECS: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794