Orta CVSS 5.3
CVE-2026-4325: Build Of Keycloak: güvenlik açığı
Açıklama (NVD)
A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an attacker to delete arbitrary single-use entries, which can enable the replay of consumed action tokens, such as password reset links. This could lead to unauthorized access or account compromise.
Özet bilgiler
- Ürün
- Redhat Build Of Keycloak
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N - EPSS
- %0,26 (yüzdelik 17)
- CWE
- CWE-653
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-build-of-keycloak | — | — | — |
| redhat-build-of-keycloak | 26.2 | 26.2 | — |
| redhat-build-of-keycloak | 26.2.15 | 26.2.15 | — |
| redhat-build-of-keycloak | 26.4 | 26.4 | — |
| redhat-build-of-keycloak | 26.4.11 | 26.4.11 | — |