Path Traversal Vulnerability in Keycloak by Red Hat

CVE-2020-14366

What is CVE-2020-14366?

A path traversal vulnerability was discovered in Keycloak, which allows attackers to exploit URL-encoded path segments to access restricted resources. This occurs due to improper transformations of the URL path to the corresponding file path at the resources endpoint. As a result, sensitive information in specific folder hierarchies may be exposed, posing a security risk to affected systems.

References