CVE-2023-0091

A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow

Low · published January 11, 2023

CVSS v3.1
3.8
EPSS
0%
Percentile
40.4
In the wild
Unconfirmed
What it is

A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00479 · 40.4th percentile
Published
2023-01-11T20:44Z
EPSS history
Timeline
  • 11 JAN 20:44Z
    A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow
    cvelistv5