{"action":"Upgrade org.keycloak:keycloak-core to 17.0.1 or later.","affected":[{"fixed":"17.0.1","introduced":"0"}],"component":"org.keycloak:keycloak-core","cve_ids":["CVE-2022-1466"],"ecosystem":"Maven","epss":0.01104,"exploited":false,"fixed_versions":["17.0.1"],"ghsa_id":"GHSA-f32v-vf79-p29q","id":"tcs_01M5N8TT0W3VWQXGP3S0DE27C6","modified_at":"2023-11-08T04:07:49.362366Z","published_at":"2022-04-27T00:00:19Z","references":["https://osv.dev/vulnerability/GHSA-f32v-vf79-p29q","https://nvd.nist.gov/vuln/detail/CVE-2022-1466","https://bugzilla.redhat.com/show_bug.cgi?id=2050228","https://github.com/keycloak/keycloak","https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-076.txt","https://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-on-750ga-syss-2021-076"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-f32v-vf79-p29q","url":"https://osv.dev/vulnerability/GHSA-f32v-vf79-p29q"}],"summary":"Improper authorization in Keycloak"}