Advisory details:
vulnrichment / CVE-2025-1391
| Advisory ID | vulnrichment/CVE-2025-1391 |
| Aliases | |
| Summary | A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a user if their username or email matches the organization’s domain pattern. This issue occurs at the mapper level, leading to misrepresentation in tokens. If an application relies on these claims for authorization, it may incorrectly assume a user belongs to an organization they are not a member of, potentially granting unauthorized access or privileges. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| CWE-284 | Improper Access Control |
| System | Score | Found at |
|---|---|---|
| cvssv3.1 | 5.4 | |
| ssvc | Track |
| Reference id | Reference type | URL |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=2346082 | ||
| 37169 | Other | https://github.com/keycloak/keycloak/issues/37169 |
| 37235 | Other | https://github.com/keycloak/keycloak/pull/37235 |
| cpe:/a:redhat:build_keycloak:26.0 | Other | https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:build_keycloak:26.0 |
| cpe:/a:redhat:build_keycloak:26.0::el9 | Other | https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:build_keycloak:26.0::el9 |
| CVE-2025-1391 | https://access.redhat.com/security/cve/CVE-2025-1391 | |
| RHSA-2025:2544 | https://access.redhat.com/errata/RHSA-2025:2544 | |
| RHSA-2025:2545 | https://access.redhat.com/errata/RHSA-2025:2545 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
There are no SSVC decisions available.