| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-services | < 24.0.5 | 24.0.5 |
Users with low privileges (just plain users in the realm) are able to utilize administrative functionalities within Keycloak admin interface. This issue presents a significant security risk as it allows unauthorized users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.
Acknowledgements: Special thanks to Maurizio Agazzini for reporting this issue and helping us improve our project.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free