What is GHSA-p225-pc2x-4jpm?

GHSA-p225-pc2x-4jpm is a security advisory published by GitHub Security Advisories with Medium severity. Incorrect Authorization in keycloak

Which CVE IDs does GHSA-p225-pc2x-4jpm cover?

GHSA-p225-pc2x-4jpm covers the following CVE IDs: CVE-2020-1725. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p225-pc2x-4jpm?

GHSA-p225-pc2x-4jpm has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-p225-pc2x-4jpm?

GHSA-p225-pc2x-4jpm affects 1 product, including: maven/org.keycloak:keycloak-parent:\u003c 13.0.0.

GHSA-p225-pc2x-4jpmMediumCVSS 5.4

Incorrect Authorization in keycloak

Vendor

GitHub Security Advisories

Published

February 9, 2022

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-1725 →

📋 Description

A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.

🎯 Affected products1

maven/org.keycloak:keycloak-parent:< 13.0.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-1725
https://bugzilla.redhat.com/show_bug.cgi?id=1765129
https://issues.redhat.com/browse/KEYCLOAK-16550
https://github.com/advisories/GHSA-p225-pc2x-4jpm