Количество 4
Количество 4
CVE-2017-12161
It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further attacks.
CVE-2017-12161
It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further attacks.
CVE-2017-12161
It was found that keycloak before 3.4.2 final would permit misuse of a ...
GHSA-959q-32g8-vvp7
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-12161 It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further attacks. | CVSS3: 4.2 | 0% Низкий | около 8 лет назад |
 | CVE-2017-12161 It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further attacks. | CVSS3: 8.8 | 0% Низкий | почти 8 лет назад |
| CVE-2017-12161 It was found that keycloak before 3.4.2 final would permit misuse of a ... | CVSS3: 8.8 | 0% Низкий | почти 8 лет назад |
| GHSA-959q-32g8-vvp7 Moderate severity vulnerability that affects org.keycloak:keycloak-core | 0% Низкий | больше 7 лет назад |
Уязвимостей на страницу