CVE Intelligence

Vulnerabilidades do Maven Org.keycloak:keycloak-services

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Maven Org.keycloak:keycloak-services: 1 registro(s), com versões afetadas e correções.

CVE-2025-14082 Baixa · 2.7 CWE-284 10/12/2025
Keycloak-services: keycloak admin rest api: improper access control leads to sensitive role metadata information disclosure
A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.