Executive brief
Keycloak logs sensitive headers
Affected products
- Maven org.keycloak:keycloak-quarkus-server
Junglewise Threat Intelligence
CVE-2025-11537: Keycloak logs sensitive headers
CVE-2025-11537 · Severity: low · CVSS 3.1 · Published 2026-02-10
Technologies: org.keycloak:keycloak-quarkus-server (Maven). Vendors: Maven.
Related threats
- Keycloak improper input validation in matrix parameters
- Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP Address
- Duplicate Advisory: Keycloak allows access to admin path through flaw
- Keycloak path traversal in admin access via proxy
- Keycloak on Quarkus CLI option for encrypted JGroups ignored