Описание
A flaw was found in the Keycloak LDAP User Federation provider. This vulnerability allows an authenticated realm administrator to trigger deserialization of untrusted Java objects via a malicious LDAP server configuration.
Ссылки
EPSS
Процентиль: 37%
0.0044
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 5.5
redhat
9 месяцев назад
A flaw was found in the Keycloak LDAP User Federation provider. This vulnerability allows an authenticated realm administrator to trigger deserialization of untrusted Java objects via a malicious LDAP server configuration.
CVSS3: 5.5
debian
9 месяцев назад
A flaw was found in the Keycloak LDAP User Federation provider. This v ...
CVSS3: 5.5
github
8 месяцев назад
Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization
EPSS
Процентиль: 37%
0.0044
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-502