Описание
Keycloak has Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.
Пакеты
org.keycloak:keycloak-parent
<= 26.5.0
Отсутствует
Связанные уязвимости
A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.
A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.
A flaw was found in Keycloak. The Keycloak Authorization header parser ...
ALT-PU-2026-4227: package `keycloak` update to version 26.5.5-alt1
ALT-PU-2026-8781: package `keycloak` update to version 26.6.3-alt1