{"action":"Upgrade org.keycloak:keycloak-core to 13.0.0 or later.","affected":[{"fixed":"13.0.0","introduced":"0"}],"component":"org.keycloak:keycloak-core","cve_ids":["CVE-2020-27838"],"ecosystem":"Maven","epss":0.17866,"exploited":false,"fixed_versions":["13.0.0"],"ghsa_id":"GHSA-pcv5-m2wh-66j3","id":"tcs_01M5N9791DENTQRJATP739RX69","modified_at":"2024-04-22T23:26:36.742448Z","published_at":"2022-05-24T17:43:50Z","references":["https://osv.dev/vulnerability/GHSA-pcv5-m2wh-66j3","https://nvd.nist.gov/vuln/detail/CVE-2020-27838","https://github.com/keycloak/keycloak/pull/7790","https://github.com/keycloak/keycloak/commit/9356843c6c3d7097d010b3bb6f91e25fcaba378c","https://bugzilla.redhat.com/show_bug.cgi?id=1906797"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-pcv5-m2wh-66j3","url":"https://osv.dev/vulnerability/GHSA-pcv5-m2wh-66j3"}],"summary":"Keycloak discloses information without authentication"}