En resumen
- CVE-2021-3856 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a org.keycloak:keycloak-core, keycloak (redhat).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.1% de las vulnerabilidades.
- Solución: actualizar a 15.1.0 o posterior.
Description
ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.
NVD description
ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.
Más vulnerabilidades de org.keycloak:keycloak-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free