Threats tagged 'ghsa-9jrw-8xf7-xqhq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.9	EPSS 0.8%	CVE-2026-9083Org.keycloak:keycloak services: Keycloak vulnerable to information disclosure through arbitrary filesystem path Medium4.9EPSS 0.8%2026-10-29GCVE DatabaseCVE-2026-9083 A vulnerability in Keycloak allows a realm administrator with the "manage-realm" role to disclose information by submitting arbitrary filesystem paths as keystore parameters when creating a key provider component. This flaw enables probing of filesystem paths to determine file existence and readability by the Keycloak process, potentially aiding further attacks. The issue affects Keycloak versions prior to 26.6.4. A fix is available in version 26.6.4. EPSS 0.8%Report on CVE-2026-9083 Vulnerability CWE-22 #ghsa-9jrw-8xf7-xqhq #maven	GCVE Database	2026-10-29

Page 1 of 1