https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 05:39:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04782 bdu:2024-04782 https://cve.radiocsirt.org/vuln/bdu:2024-04782 https://cve.radiocsirt.org/vuln/euvd-2026-261407 EUVD-2026-261407 https://cve.radiocsirt.org/vuln/euvd-2026-261407 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3656 <p>A flaw was found in Keycloak. Certain endpoints in Keycloak&#39;s admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.</p> <p>A flaw was found in Keycloak. Certain endpoints in Keycloak&#39;s admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3656 https://cve.radiocsirt.org/vuln/ghsa-2cww-fgmg-4jqc <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-services</p> <p>Users with low privileges (just plain users in the realm) are able to utilize administrative functionalities within Keycloak admin interface. This issue presents a significant security risk as it allows unauthorized users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.</p> <p>**Acknowledgements:** Special thanks to Maurizio Agazzini for reporting this issue and helping us improve our project.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-services</p> <p>Users with low privileges (just plain users in the realm) are able to utilize administrative functionalities within Keycloak admin interface. This issue presents a significant security risk as it allows unauthorized users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.</p> <p>**Acknowledgements:** Special thanks to Maurizio Agazzini for reporting this issue and helping us improve our project.</p> https://cve.radiocsirt.org/vuln/ghsa-2cww-fgmg-4jqc https://cve.radiocsirt.org/vuln/gsd-2024-3656 gsd-2024-3656 https://cve.radiocsirt.org/vuln/gsd-2024-3656 https://cve.radiocsirt.org/vuln/rhsa-2024:3572 <p>keycloak: Unguarded admin REST API endpoints allows low privilege users to use administrative functionalities keycloak: exposure of sensitive information in Pushed Authorization Requests (PAR) KC_RESTART cookie</p> <p>keycloak: Unguarded admin REST API endpoints allows low privilege users to use administrative functionalities keycloak: exposure of sensitive information in Pushed Authorization Requests (PAR) KC_RESTART cookie</p> https://cve.radiocsirt.org/vuln/rhsa-2024:3572 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1350 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Administratorrechte zu erlangen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1350