CalvinBackup/CVEs-PoC
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-06-03 21:18:06 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
6cd0d0806c9bf647d01eb3deca931ca47bebcbc7
CVEs-PoC/2019/CVE-2019-10169.md
T
0xMarcio cb00e1339f Update CVE list 2025-09-29 21:09
2025-09-29 21:09:30 +02:00

18 lines
782 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
### [CVE-2019-10169](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10169)
![](https://img.shields.io/static/v1?label=Product&message=keycloak&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=8.0.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-267&color=brightgreen)
### Description
A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running application.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/ARPSyndicate/cve-scores
Reference in New Issue View Git Blame Copy Permalink