AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-7474

CRITICAL · CVSS 9.8 EPSS 2.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-05-12 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.

CVE
CVE-2017-7474
Severity
CRITICAL
CVSS
9.8
EPSS
2.54%

Original NVD Description

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.

Related CVEs

Other vulnerabilities affecting the same vendor(s)