CVE-2020-14389
It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modifica…
Published: 2020-11-17 · CVSS: Unscored
It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7