Executive brief
Keycloak has lack of validation of access token on client registrations endpoint
Affected products
- Maven org.keycloak:keycloak-core
Junglewise Threat Intelligence
CVE-2023-0091 · Severity: low · CVSS 3.1 · Published 2023-01-12
Technologies: org.keycloak:keycloak-core (Maven). Vendors: Maven.
Keycloak has lack of validation of access token on client registrations endpoint