Yüksek CVSS 7.5
CVE-2026-4634: Build Of Keycloak: güvenlik açığı
Açıklama (NVD)
A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect (OIDC) token endpoint. This leads to high resource consumption and prolonged processing times, ultimately resulting in a Denial of Service (DoS) for the Keycloak server.
Özet bilgiler
- Ürün
- Redhat Build Of Keycloak
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,64 (yüzdelik 51)
- CWE
- CWE-1050
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-build-of-keycloak | — | — | — |
| redhat-build-of-keycloak | 26.2 | 26.2 | — |
| redhat-build-of-keycloak | 26.2.15 | 26.2.15 | — |
| redhat-build-of-keycloak | 26.4 | 26.4 | — |
| redhat-build-of-keycloak | 26.4.11 | 26.4.11 | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- security.access.redhat.com
- CWE-1050