Количество 6
Количество 6
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow.
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow.
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow.
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This ...
GHSA-wv3h-x6c4-r867
Keycloak services allows the issuance of access and refresh tokens for disabled users
BDU:2026-01119
Уязвимость компонента keycloak-services программного средства для управления идентификацией и доступом Keycloak, позволяющая нарушителю повысить свои привилегии
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow. | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow. | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow. | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
| CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak. This ... | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
| GHSA-wv3h-x6c4-r867 Keycloak services allows the issuance of access and refresh tokens for disabled users | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | BDU:2026-01119 Уязвимость компонента keycloak-services программного средства для управления идентификацией и доступом Keycloak, позволяющая нарушителю повысить свои привилегии | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
Уязвимостей на страницу