CyberRota Analysis
AI-GeneratedA vulnerability in Keycloak's Authorization Services allows attackers to exploit improper URI normalization in the PathMatcher component. By manipulating request paths with additional characters, an authenticated user can bypass security policies, potentially gaining unauthorized access to administrative or restricted areas. Organizations using Keycloak should prioritize addressing this issue to safeguard sensitive data and maintain proper access controls.
Original NVD Description
A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick the system into applying a less restrictive security policy than intended. This allows an authenticated user to access administrative or restricted areas they should not have permission to see.
Related CVEs
Other vulnerabilities affecting the same vendor(s)