CVE-2023-6841 — Keycloak: amount of attributes per object is not limited and it may lead to dos
A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a reso…
Published: 2024-09-10 · CVSS: 7.5 · CVSS 3.1
A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7