Executive brief
Duplicate Advisory: Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization
Affected products
- Maven org.keycloak:keycloak-ldap-federation
Junglewise Threat Intelligence
Duplicate Advisory: Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization
Severity: low · CVSS 3.1 · Published 2025-11-25
Technologies: org.keycloak:keycloak-ldap-federation (Maven). Vendors: Maven.