Zurück zur CVE-Übersicht
CVE-2026-0707
MEDIUM(5.3)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Risk Signal Score13/100 — NIEDRIG
- CVSS 5.3 — Mittel
EPSS-Score
0%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
5.3
Technische Schwere
Beschreibung
A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.
GitHub Advisories
GHSA-gv94-wp4h-vv8pMEDIUM
Keycloak has Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
maven/org.keycloak:keycloak-parent
GitHub Advisory