| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-core | < 9.0.0 | 9.0.0 |
| keycloak | < 9.0.0 | 9.0.0 |
A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free