Описание
Keycloak is vulnerable to IDN homograph attack
A flaw was found in keycloak, where IDN homograph attacks are possible. This flaw allows a malicious user to register a name that already exists and then tricking an admin to grant extra privileges. The highest threat from this vulnerability is to integrity.
Пакеты
Наименование
org.keycloak:keycloak-services
maven
Затронутые версииВерсия исправления
< 18.0.0
18.0.0
Дефекты
CWE-284
Дефекты
CWE-284