Search for packages
purl | pkg:maven/org.keycloak/keycloak-authz-client@3.0.0.CR1 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-dr9d-wkdt-aaar
Aliases: CVE-2019-10169 GHSA-9c24-43p5-fv82 |
Improper Privilege Management A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running the application. |
Affected by 1 other vulnerability. |
VCID-m3sb-ekyc-aaad
Aliases: CVE-2020-1698 GHSA-qgmm-f2qw-r95f |
Information Exposure A flaw was found in keycloak A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality. |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |