CVEvulnerability

CVE-2024-11734

6.5 MEDIUM Published 2025-01-14 Modified 2026-08-31 Official page ↗
Status
Deferred
Published
2025-01-14
Last modified
2026-08-31
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-693

Description

A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service. This action is done by modifying any of the security headers and inserting newlines, which causes the Keycloak server to write to a request that has already been terminated, leading to the failure of said request.

Related

Weakness · CWE (1)

  • CWE-693 Protection Mechanism Failure weakness

References