Search for packages
purl | pkg:maven/org.keycloak/keycloak-core@9.0.1 |
Tags | Ghost |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-5v5t-uhz9-aaaq
Aliases: CVE-2020-10686 GHSA-9695-w6h2-jpv9 |
Incorrect Authorization A flaw was found in Keycloak where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users. |
Affected by 41 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |