Количество 4
Количество 4
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow.
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow.
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This ...
GHSA-wv3h-x6c4-r867
Keycloak services allows the issuance of access and refresh tokens for disabled users
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow. | CVSS3: 6.5 | 0% Низкий | 19 дней назад |
 | CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow. | CVSS3: 6.5 | 0% Низкий | 19 дней назад |
| CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak. This ... | CVSS3: 6.5 | 0% Низкий | 19 дней назад |
| GHSA-wv3h-x6c4-r867 Keycloak services allows the issuance of access and refresh tokens for disabled users | CVSS3: 6.5 | 0% Низкий | 19 дней назад |
Уязвимостей на страницу