{"action":"Upgrade org.keycloak:keycloak-services to 18.0.0 or later.","affected":[{"fixed":"18.0.0","introduced":"0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2022-1245"],"ecosystem":"Maven","epss":0.01414,"exploited":false,"fixed_versions":["18.0.0"],"ghsa_id":"GHSA-75p6-52g3-rqc8","id":"tcs_01M5N8HGVN9ZR70P99Z8HPMSNR","modified_at":"2026-07-16T03:59:27.995234418Z","published_at":"2022-04-26T21:21:00Z","references":["https://osv.dev/vulnerability/GHSA-75p6-52g3-rqc8","https://github.com/keycloak/keycloak/security/advisories/GHSA-75p6-52g3-rqc8","https://nvd.nist.gov/vuln/detail/CVE-2022-1245","https://github.com/keycloak/keycloak/commit/76d83f46fad94ebcbedaa49e6daad458e2894e52","https://github.com/keycloak/keycloak"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-75p6-52g3-rqc8","url":"https://osv.dev/vulnerability/GHSA-75p6-52g3-rqc8"}],"summary":"Keycloak vulnerable to privilege escalation on Token Exchange feature"}