| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-core | < 15.1.0 | 15.1.0 |
| keycloak | < 15.1.0 | 15.1.0 |
ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free