CNNVD-202512-3109 Information
Dec 16, 2025
cve
CNNVD ID
CNNVD-202512-3109
Related CVE
- CNNVD Published: 2025-12-16
Description (Chinese)
Keycloak是Keycloak开源的一种开源身份和访问管理解决方案。 Keycloak存在安全漏洞，该漏洞源于授权资源管理API端点访问控制不当，可能导致未经授权的资源删除或更新。
Description (English)
Keycloak is an open-source identity and access management solution for Keycloak. There is a security loophole in Keycloak, which stems from the miscontrol of API endpoint access to authorized resource management, which may lead to the removal or upgrading of unauthorized resources.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Keycloak
Published
2025-12-16
Last Modified
2026-02-24
References
https://access.redhat.com/security/cve/CVE-2025-14777 https://bugzilla.redhat.com/show_bug.cgi?id=2422596
Share on: