TI-2017-01837 CVE-2017-2582 · GHSA-c77r-6f64-478q
Information disclosure in Red Hat keycloak
Priority LOW 33
It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property.