CVE CyberSecurity Database News - Latest cybersecurity news and CVE details

Keycloak

CVE-2022-3916: Root Session Vulnerability in Keycloak's Offline_Access Scope and Its Potential Impact on Shared Computers

Sep 20, 2023 Exploit Keycloak

CVE-2022-3916: Root Session Vulnerability in Keycloak's Offline_Access Scope and Its Potential Impact on Shared Computers

The CVE-2022-3916 vulnerability has recently been discovered in a widely used open-source identity and access management solution, Keycloak. This security issue originates from a flaw

Jan 13, 2023 Exploit redhat.com Keycloak

CVE-2022-3782 - Keycloak Path Traversal Vulnerability via Double URL Encoding Exploited

A newly discovered vulnerability, CVE-2022-3782, affects the popular open-source Keycloak identity and access management solution, allowing for a potential path traversal attack via double URL