{"action":"Upgrade org.keycloak:keycloak-core to 6.0.0 or later.","affected":[{"fixed":"6.0.0","introduced":"0"}],"component":"org.keycloak:keycloak-core","cve_ids":["CVE-2019-3868"],"ecosystem":"Maven","epss":0.01005,"exploited":false,"fixed_versions":["6.0.0"],"ghsa_id":"GHSA-gc52-xj6p-9pxp","id":"tcs_01M5N8XZ1YKB79Q29SSHD966G0","modified_at":"2023-11-08T04:01:34.830106Z","published_at":"2019-04-30T15:37:21Z","references":["https://osv.dev/vulnerability/GHSA-gc52-xj6p-9pxp","https://nvd.nist.gov/vuln/detail/CVE-2019-3868","https://access.redhat.com/errata/RHSA-2019:1140","https://access.redhat.com/errata/RHSA-2019:2998","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3868","http://www.securityfocus.com/bid/108061"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-gc52-xj6p-9pxp","url":"https://osv.dev/vulnerability/GHSA-gc52-xj6p-9pxp"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Keycloak"}