Junglewise Threat Intelligence

CVE-2023-0091: Keycloak has lack of validation of access token on client registrations endpoint

CVE-2023-0091 · Severity: low · CVSS 3.1 · Published 2023-01-12

Technologies: org.keycloak:keycloak-core (Maven). Vendors: Maven.

Executive brief

Keycloak has lack of validation of access token on client registrations endpoint

Affected products

  • Maven org.keycloak:keycloak-core

Related threats