CVE-2023-0264 (published 2023-08-04T17:09:27.693Z)
A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.
Affected products: Vendor: redhat.com
Product: Keycloak
Versions: 18.0.6