En resumen
- CVE-2019-14837 es una vulnerabilidad CRÍTICO (CVSS 9.1) que afecta a org.keycloak:keycloak-core, keycloak (redhat), single sign-on (redhat).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.7%, mayor que el 77.4% de las vulnerabilidades.
- Solución: actualizar a 8.0.0 o posterior.
Description
A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be '[email protected]'.
NVD description
A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be '[email protected]'.
Más vulnerabilidades de org.keycloak:keycloak-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free