~ / search / GHSA-594w-2fwp-jwrc

GHSA-594w-2fwp-jwrc

Keycloak Admin REST API exposes backend schema and rules

Source: GitHub Advisory Database (reviewed) Low CVE-2025-14083

Packages

EcosystemPackageAffectedFixed in
Maven org.keycloak:keycloak-services <= 26.2.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in the Keycloak Admin REST API. This vulnerability allows the exposure of backend schema and rules, potentially leading to targeted attacks or privilege escalation via improper access control.

References

External links from the advisory. They lead to third-party sites.