PkgSeer

Vulnerability GHSA-f5p5-6xmx-p252

High Risk
HIGH RISK
CVSS Score: 8.1
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
1 day ago
October 29, 2026 at 04:37 PM UTC
Keycloak vulnerable to authorization bypass via incorrect uri comparison
21.1.0 - 26.0.9
21.1.0 - 26.0.9

Summary

Keycloak vulnerable to authorization bypass via incorrect uri comparison

Details

Description

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path within a request URL, either as a path segment or a query parameter, an attacker can gain unauthorized access to protected resources.

Related Vulnerabilities

Other vulnerabilities affecting the same packages

High Risk
1 day ago
Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass
1.0-alpha-1 and 1.0-alpha-1-12062013 - 1.0-beta-1 and 1.0-beta-1-20150521 and 1.0-beta-1-20150523 - 1.5.0-Final and 1.5.0.Final - 26.6.3 GHSA-v3f7-2p4r-mwfw
1.0-alpha-1 and 1.0-alpha-1-12062013 - 1.0-beta-1 and 1.0-beta-1-20150521 and 1.0-beta-1-20150523 - 1.5.0-Final and 1.5.0.Final - 26.6.3 GHSA-v3f7-2p4r-mwfw
Medium Risk
1 day ago
Keycloak vulnerable to information disclosure through arbitrary filesystem path probing
1.0-alpha-1 and 1.0-alpha-1-12062013 - 1.0-beta-1 and 1.0-beta-1-20150521 and 1.0-beta-1-20150523 - 1.5.0-Final and 1.5.0.Final - 26.6.3 GHSA-9jrw-8xf7-xqhq
1.0-alpha-1 and 1.0-alpha-1-12062013 - 1.0-beta-1 and 1.0-beta-1-20150521 and 1.0-beta-1-20150523 - 1.5.0-Final and 1.5.0.Final - 26.6.3 GHSA-9jrw-8xf7-xqhq
Medium Risk
1 day ago
Keycloak allows unauthorized access to resources via uma permission ticket bypass
1.0-alpha-1 and 1.0-alpha-1-12062013 - 1.0-beta-1 and 1.0-beta-1-20150521 and 1.0-beta-1-20150523 - 1.5.0-Final and 1.5.0.Final - 26.6.3 GHSA-w3p3-7cjg-vgfw
1.0-alpha-1 and 1.0-alpha-1-12062013 - 1.0-beta-1 and 1.0-beta-1-20150521 and 1.0-beta-1-20150523 - 1.5.0-Final and 1.5.0.Final - 26.6.3 GHSA-w3p3-7cjg-vgfw
Medium Risk
1 day ago
Keycloak: Attacker can re-enable and take over disabled clients via registration access token
1.0-alpha-1 and 1.0-alpha-1-12062013 - 1.0-beta-1 and 1.0-beta-1-20150521 and 1.0-beta-1-20150523 - 1.5.0-Final and 1.5.0.Final - 26.6.3 GHSA-r7rc-c989-86g6
1.0-alpha-1 and 1.0-alpha-1-12062013 - 1.0-beta-1 and 1.0-beta-1-20150521 and 1.0-beta-1-20150523 - 1.5.0-Final and 1.5.0.Final - 26.6.3 GHSA-r7rc-c989-86g6
Critical
2 months ago
Keycloak: Unauthenticated account takeover via reset-credentials flow bypass
26.0.0 - 26.7.1 GHSA-4gv3-mc9p-5wqc
26.0.0 - 26.7.1 GHSA-4gv3-mc9p-5wqc
View all vulnerabilities for these packages

Impacted packages

Timeline

Published
1 day ago
October 29, 2026 at 04:37 PM UTC
Fixed (26.0.10)
Unknown
Unknown
Fixed (26.6.4)
Unknown
Unknown
Last Modified
1 day ago
October 29, 2026 at 04:56 PM UTC