h4x0r-dz/CVE-2024-3656

PoC

Keycloak admin API allows low privilege users to use administrative functions

view exploit source poc_in_githubauthor h4x0r-dzpublished 2024-10-12catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-3656US	—	3.32% (89th)	Exploit	2024-10-09
A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.