Threats tagged 'ghsa-59wr-5w6r-wq5f'

A vulnerability in the UMA resource registration endpoint of the keycloak-services component allows an authenticated user with specific permissions to update resources they do not own when remote resource management is enabled. This flaw is due to a missing ownership check when an existing resource ID is provided, enabling unauthorized modification of resource configurations such as names, URIs, and scopes.