Lucene search
Veracode Vulnerability DatabaseVERACODE:25376HistoryMay 12, 2020 - 3:16 a.m.
Remote Code Execution (RCE)
2020-05-1203:16:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.008 Low
EPSS
Percentile
81.9%
keycloak-common is vulnerable to remote code execution. The vulnerability exists due to the lack of validation of classes check when using the ObjectInputStream.
| CPE | Name | Operator | Version |
|---|---|---|---|
| keycloak common | le | 10.0.2 | |
| keycloak core | le | 10.0.2 |
Related
osv
osv
Improper Input Validation in Keycloak
2022-02-09 00:56:14
CVE-2020-1714
2020-05-13 19:15:11
cvelist
cvelist
CVE-2020-1714
2020-05-13 18:25:56
prion
prion
Type confusion
2020-05-13 19:15:00
cve
cve
CVE-2020-1714
2020-05-13 19:15:11
redhatcve
redhatcve
CVE-2020-1714
2020-05-11 13:11:43
nvd
nvd
CVE-2020-1714
2020-05-13 19:15:11
redhat
redhat
nessus
nessus
github
github
Improper Input Validation in Keycloak
2022-02-09 00:56:14
archlinux
archlinux
[ASA-202005-8] keycloak: arbitrary code execution
2020-05-16 00:00:00