org.keycloak:keycloak-server-spi-private vulnerabilities (Maven)
7 vulnerabilities.
org.keycloak:keycloak-server-spi-privateMavenKeycloak-rhel9: organization data leak after feature disabled in keycloak4.3 Mediumorg.keycloak:keycloak-server-spi-privateMavenKeycloak: keycloak: privilege escalation due to oversized subject_token jwt6.8 Mediumorg.keycloak:keycloak-server-spi-privateMavenKeycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection api4.3 Mediumorg.keycloak:keycloak-server-spi-privateMavenKeycloak: keycloak: unauthorized authentication via disabled saml identity provider8.1 Highorg.keycloak:keycloak-server-spi-privateMavenOrg.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administrators4.9 Mediumorg.keycloak:keycloak-server-spi-privateMavenKeycloak: client access via device auth request spoof3.5 Loworg.keycloak:keycloak-server-spi-privateMavenCross-site Scripting in keycloak4.8 Medium