Archive
17 November 2024
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Low 3.4
Keycloak: impersonation via logout token exchange
A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow an authenticated attacker to exchange a logout token for an access token and possibly gain access to data outside of e…