Vulnetix
Try Vulnetix Request Demo
CVE-2020-14366 PUBLISHED CVSS 6.800000190734863 MEDIUM

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a transformation of the url path to the file path. Only few specific folder hierarchies can be exposed by this flaw

EPSS 0.38% · 59.5th percentile

Risk Scores

CVSS v3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.38%
59.5th percentile

Affected Products

VendorProductVersions
Mavenorg.keycloak:keycloak-parent0
redhatkeycloak0
Red Hatkeycloakbefore (excluding) 12.0.0

Timeline

References

Open in Interactive Console →