← Database

CVE-2025-14082

LOW CVSS: 2.7 Published: 2025-12-10 Modified: 2026-06-17

Description

A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.

Affected Platforms

Unknown

Weakness Type

CWE-284

References