org.apache.camel:camel-keycloak vulnerabilities (Maven)
3 vulnerabilities.
-
org.apache.camel:camel-keycloakMaven Apache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null… 9.8 Critical -
org.apache.camel:camel-keycloakMaven Apache Camel: Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted 9.8 Critical -
org.apache.camel:camel-keycloakMaven Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy 9.1 Critical