Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-69fp-7c8p-crjr

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-69fp-7c8p-crjr

Keycloak exposes sensitive information in Pushed Authorization Requests (PAR) A flaw was found in Keycloak in the OAuth 2.0 Pushed Authorization Requests (PAR). Client provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the authorization server's HTTP response to a request_uri authorization request. This could lead to an information disclosure vulnerability.

gitlab/maven/org.keycloak/keycloak-services/CVE-2024-4540

Keycloak exposes sensitive information in Pushed Authorization Requests (PAR) A flaw was found in Keycloak in the OAuth 2.0 Pushed Authorization Requests (PAR). Client provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the authorization server's HTTP response to a request_uri authorization request. This could lead to an information disclosure vulnerability.

gitlab/maven/org.keycloak/keycloak-services/GHSA-69fp-7c8p-crjr

Duplicate This advisory duplicates another.