GHSA-j229-2h63-rvh9
Improper Authentication for Keycloak
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.keycloak:keycloak-parent | < 8.0.0 | 8.0.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.
References
External links from the advisory. They lead to third-party sites.