Описание
A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.
EPSS
2.7 Low
CVSS3
Дефекты
Связанные уязвимости
A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.
A flaw was found in Keycloak Admin REST (Representational State Transf ...
Keycloak Admin REST (Representational State Transfer) API does not properly enforce permissions
ALT-PU-2026-4792: package `keycloak` update to version 26.5.6-alt1
ALT-PU-2026-4903: package `keycloak` update to version 26.5.6-alt1
EPSS
2.7 Low
CVSS3