CVE-2020-1718 Vulnerability in maven package org.keycloak:keycloak-parent

Description

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

Remediation

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1718

Related Vulnerabilities

CVE-2022-25876 Vulnerability in npm package link-preview-js

CVE-2022-29599 Vulnerability in maven package org.apache.maven.shared:maven-shared-utils

CVE-2017-5954 Vulnerability in npm package serialize-to-js

CVE-2021-3536 Vulnerability in maven package org.wildfly:wildfly-parent

CVE-2020-25640 Vulnerability in maven package org.jboss.genericjms:generic-jms-ra-jar

Severity

Critical

Classification

CWE-287 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H