cve/2024/CVE-2024-3656.md
2025-09-29 21:09:30 +02:00

1.3 KiB

CVE-2024-3656

Description

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.

POC

Reference

No PoCs from references.

Github