Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-14366

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cp67-8w3w-6h9c

Path Traversal A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

gitlab/maven/org.keycloak/keycloak-parent/CVE-2020-14366

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

gitlab/maven/org.keycloak/keycloak-services/CVE-2020-14366

Path Traversal A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw