GitHub Advisoryadvisory · Maven

GHSA-52rg-hpwq-qp56 Allocation of Resources Without Limits or Throttling in Keycloak

HIGH Published 2022-02-09 Modified 2021-04-01 Official page ↗
Aliases
CVE-2020-10758
Ecosystem
Maven
Packages
org.keycloak:keycloak-parent
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770
Reviewed
2021-04-01

Affected packages

• Maven org.keycloak:keycloak-parent: < 11.0.1 → fixed in 11.0.1

Description

A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value that exceeds the actual byte count of the request body.

Related

Alias · CVE (1)

  • CVE-2020-10758 A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified… vulnerability

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References