Description
A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1718
Related Vulnerabilities
CVE-2022-38370 Vulnerability in maven package org.apache.iotdb:iotdb-grafana-connector
CVE-2020-11995 Vulnerability in maven package com.caucho:hessian
CVE-2020-17527 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2023-33938 Vulnerability in maven package com.liferay.portal:release.portal.bom
CVE-2018-8032 Vulnerability in maven package org.apache.axis:axis