Description (CNA)
It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| keycloak / keycloak | affected fixed in 8.0.0 |
CWE
CWE-200
References
ADP enrichment
No English description supplied.