CVE-2020-1694
A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to …
Published: 2020-09-16 · CVSS: Unscored
A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7