{"action":"Upgrade org.keycloak:keycloak-core to 9.0.0 or later.","affected":[{"fixed":"9.0.0","introduced":"0"}],"component":"org.keycloak:keycloak-core","cve_ids":["CVE-2020-1698"],"ecosystem":"Maven","epss":0.00371,"exploited":false,"fixed_versions":["9.0.0"],"ghsa_id":"GHSA-qgmm-f2qw-r95f","id":"tcs_01M5N99H3FG8G7ET5B5KRWB49C","modified_at":"2024-04-22T23:26:36.675572Z","published_at":"2022-05-24T17:17:37Z","references":["https://osv.dev/vulnerability/GHSA-qgmm-f2qw-r95f","https://nvd.nist.gov/vuln/detail/CVE-2020-1698","https://github.com/keycloak/keycloak/pull/6751","https://github.com/keycloak/keycloak/commit/62c9e1577618470832ede22dcedd46cba15b1836","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-qgmm-f2qw-r95f","url":"https://osv.dev/vulnerability/GHSA-qgmm-f2qw-r95f"}],"summary":"Keycloak leaks sensitive information in logged exceptions"}