Threats tagged 'ghsa-cm8m-mhv8-9v9v'

OpenRemote versions prior to 1.32.2 have an improper authorization vulnerability that allows realm administrators to access and modify global resources without super administrator checks. This flaw enables attackers with realm admin privileges to change the global keycloakUrl, potentially redirecting authentication flows for credential phishing, injecting malicious CSS, replacing map tiles, and deleting logs.