Description
It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information.
Remediation
References
Related Vulnerabilities
Ruby on Rails Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-33174)
WordPress Plugin Geo Mashup Unspecified Vulnerability (1.10.3)
WordPress Plugin WP Table Builder-WordPress Table Cross-Site Scripting (1.3.9)
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.18)
Magento XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2021-21025)