Описание
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12161. Reason: This candidate is a reservation duplicate of CVE-2017-12161. Notes: All CVE users should reference CVE-2017-12161 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Связанные уязвимости
CVSS3: 4.2
redhat
около 8 лет назад
[REJECTED CVE] A vulnerability has been identified where keycloak would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further attacks.
github
больше 7 лет назад
Moderate severity vulnerability that affects org.keycloak:keycloak-core