Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-3856

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3w4v-rvc4-2xpw

Keycloak has Files or Directories Accessible to External Parties ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

gitlab/maven/org.keycloak/keycloak-core/CVE-2021-3856

Files or Directories Accessible to External Parties ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.

gitlab/maven/org.keycloak/keycloak-services/CVE-2021-3856

Files or Directories Accessible to External Parties ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.