Keycloak-services: keycloak-services: required actions bypassed via kc_action parameter

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kc_action query parameter set to a mandatory action already assigned to the user, such as profile verification or terms and conditions. Due to incorrect handling of application-initiated actions, Keycloak may skip these mandatory challenges and issue an authorization code. This can allow a user to bypass administrative requirements and gain access to the application without completing necessary profile updates or agreeing to terms.

Etkilenen sürümler2 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• bugzilla.redhat.com/show_bug.cgi Üçüncü taraf
• access.redhat.com/security/cve/CVE-2026-118959 Diğer

Kayıt geçmişi

1. 30 Eki 2026 03:15Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-91920Undertow: undertow: chunkreader message length permits chunk-size overflow
• 4,3 CVE-2026-118947Keycloak-services: keycloak-services: authorization bypass via uma resource registration idor
• 6,8 CVE-2026-118425Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback
• 5,4 CVE-2026-117859Keycloak-services: keycloak-services: par single-use bypass via flow restart
• 4,2 CVE-2026-118030Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent logins
• 5,3 CVE-2026-117688Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration