In breve
- CVE-2019-14837 è una vulnerabilità CRITICO (CVSS 9.1) che riguarda org.keycloak:keycloak-core, keycloak (redhat), single sign-on (redhat).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 77.4% delle vulnerabilità.
- Correzione: aggiornare a 8.0.0 o successiva.
Description
A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be '[email protected]'.
NVD description
A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be '[email protected]'.
Altre vulnerabilità di org.keycloak:keycloak-core
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free