2023-01-12

2023-01-13

2023-01-14

All (2) Critical (3) High (28) Medium (22) Low (2)

CVE-2023-0091 Jan 13, 06:15 LOW PATCH Monitor

A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Red Hat Keycloak

NVD

CVSS 3.1

3.8

EPSS

0.5%

CVE-2023-22489 Jan 13, 19:15 LOW PATCH Monitor

Flarum is a discussion platform for websites. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

Authentication Bypass Flarum

NVD GitHub

CVSS 3.1

3.5

EPSS

0.6%