CVE-2023-0657 — Keycloak: impersonation via logout token exchange
A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow an authenticated attacker to exchang…
Published: 2024-11-17 · CVSS: 3.4 · CVSS 3.1
A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow an authenticated attacker to exchange a logout token for an access token and possibly gain access to data outside of enforced permissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7