| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-services | < 26.5.7 | 26.5.7 |
| build of keycloak | = 26.2= 26.2.15= 26.4= 26.4.11 |
A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect (OIDC) token endpoint. This leads to high resource consumption and prolonged processing times, ultimately resulting in a Denial of Service (DoS) for the Keycloak server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free