GHSA-c9x9-xv66-xp3v
Improper privilege management in Keycloak
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.keycloak:keycloak-core | < 12.0.0 | 12.0.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in Keycloak, where it would permit a user with a view-profile role to manage the resources in the new account console. This flaw allows a user with a view-profile role to access and modify data for which the user does not have adequate permission.
References
External links from the advisory. They lead to third-party sites.