💣Exploit CVE-2024-4540 - A flaw was found in Keycloak in OAuth 2.0 Pushed A

[Maksim]

CVE ID : CVE-2024-4540
Published : June 3, 2024, 4:15 p.m. | 20 minutes ago
Description : A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR). Client-provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the authorization server's HTTP response to a `request_uri` authorization request, possibly leading to an information disclosure vulnerability.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.