Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vf3w-mcmx-rx83

Опубликовано: 20 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 2.7

Описание

A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /admin/serverinfo endpoint can inadvertently provide sensitive environment information.

A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /admin/serverinfo endpoint can inadvertently provide sensitive environment information.

EPSS

Процентиль: 20%
0.00273
Низкий

2.7 Low

CVSS3

Дефекты

CWE-497

Связанные уязвимости

CVSS3: 2.7
redhat
больше 1 года назад

A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /admin/serverinfo endpoint can inadvertently provide sensitive environment information.

CVSS3: 2.7
nvd
больше 1 года назад

A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /admin/serverinfo endpoint can inadvertently provide sensitive environment information.

CVSS3: 2.7
debian
больше 1 года назад

A vulnerability has been identified in Keycloak that could lead to una ...

CVSS3: 7.1
altlinux
около 1 года назад

ALT-PU-2025-10780: package `keycloak` update to version 26.3.2-alt1

CVSS3: 8.8
altlinux
8 месяцев назад

ALT-PU-2026-4227: package `keycloak` update to version 26.5.5-alt1

EPSS

Процентиль: 20%
0.00273
Низкий

2.7 Low

CVSS3

Дефекты

CWE-497