GHSA-52rg-hpwq-qp56HighCVSS 7.5

Allocation of Resources Without Limits or Throttling in Keycloak

Published
February 9, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-10758 →

📋 Description

A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value that exceeds the actual byte count of the request body.

🎯 Affected products1

  • maven/org.keycloak:keycloak-parent:< 11.0.1

🔗 References (4)