← All credits

Red Hat would like to thank chungkn (OneMount Group) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

Keycloak: keycloak: replay of action tokens via improper handling of single-use entries