A flaw was found in keycloak.
Priority LOW 32CWE-377Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.
Summary
A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to the contents that keycloak stores in this directory. The highest threat from this vulnerability is to data confidentiality and integrity.
Why it matters now
EPSS 0.00299 22nd percentileScored 2026-11-07
Fix Fixed org.keycloak:keycloak-core (Maven): 13.0.0
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | keycloak | keycloak 13.0.0 | — | No fix listed | CNA |
| — | org.keycloak:keycloak-core (Maven) | before 13.0.0 | 13.0.0 | Patch available | GHSA-6xp6-fmc8-pmmr |
- keycloak Vendor— Affected keycloak 13.0.0 Fixed in — No fix listed CNA
- org.keycloak:keycloak-core (Maven) Vendor— Affected before 13.0.0 Fixed in 13.0.0 Patch available GHSA-6xp6-fmc8-pmmr
Remediation
- Fix · GHSA-6xp6-fmc8-pmmr org.keycloak:keycloak-core (Maven) Fixed in 13.0.0 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
Not affected: 7 products
- Red Hat Decision Manager 7
- Red Hat Fuse 7
- Red Hat Integration Camel K 1
- Red Hat OpenShift Application Runtimes
- Red Hat Process Automation 7
- Red Hat Single Sign-On 7
- Red Hat support for Spring Boot
Timeline
- 2026-10-02 Threatist record created from CVE-2021-20202
- 2026-10-03 Alias added: GHSA-6xp6-fmc8-pmmr
References
More Red Hat Keycloak vulnerabilities
- TI-2024-01049 Keycloak: path transversal in redirection validation CVSS 3.1HIGH 8.1
- TI-2023-26623 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… CVSS 3.1MEDIUM 5.9
- TI-2020-08665 Server-side request forgery in keycloak CVSS 3.1MEDIUM 5.3
- TI-2022-03468 Path traversal in Red Hat Keycloak CVSS 3.1CRITICAL 9.1
- TI-2021-03612 A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak. CVSS 3.1MEDIUM 6.1
- TI-2022-03994 Cross-site scripting in keycloak CVSS 3.1CRITICAL 10.0
Sources
- CVE-2021-20202 · CVE Program
- CVE-2021-20202 · NVD
- FIRST EPSS
- GHSA-6xp6-fmc8-pmmr · GitHub Advisory Database · CC BY 4.0
- CVE-2021-20202 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences