← All credits

Red Hat would like to thank Simone Paganessi for reporting this issue.

1 vulnerability record and advisories credit this contributor.

CVE-2025-13881
Org.keycloak.services.resources.admin: keycloak: limited administrator can retrieve sensitive user attributes via admin api