writeups.xyz / User impersonation via stolen UUID code in KeyCloak (CVE-2023-0264)

Submitter : c2a

Date: 14 April 2023

Bounty : undisclosed

Vulnerabilities :

• OAuth
• OIDC
• Privilege Escalation
• Broken Authentication

Programs :

• Keycloak

Authors :

• Jordi Zayuelas I Muñoz

Link :
https://www.offensity.com/en/blog/user-impersonation-via-stolen-uuid-code-in-keycloak-cve-2023-0264/