Github.Com Keycloak Keycloak-Gatekeeper vulnerabilities

1 known vulnerability affecting github.com/keycloak_keycloak-gatekeeper.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-14359HIGH≥ 0, ≤ 1.2.82022-02-09

CVE-2020-14359 [HIGH] CWE-305 Keycloak Gatekeeper vulnerable to bypass on using lower case HTTP headers Keycloak Gatekeeper vulnerable to bypass on using lower case HTTP headers A vulnerability was found in all versions of the deprecated package Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) we can bypass our Gatekeeper. Lower case headers are also accepted by some webservers (e.g. Jetty). This means there is no protection when we put a Gatekeeper in front of a Jetty ser