Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cp67-8w3w-6h9c

Опубликовано: 09 фев. 2022
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Path Traversal

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

Пакеты

Наименование

org.keycloak:keycloak-parent

maven
Затронутые версииВерсия исправления

< 12.0.0

12.0.0

EPSS

Процентиль: 59%
0.00384
Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.8
redhat
больше 5 лет назад

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

CVSS3: 6.8
nvd
около 5 лет назад

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

CVSS3: 6.8
debian
около 5 лет назад

A vulnerability was found in keycloak, where path traversal using URL- ...

EPSS

Процентиль: 59%
0.00384
Низкий

7.5 High

CVSS3

Дефекты

CWE-22