CVE-2014-3651

Name of the Vulnerable Software and Affected Versions: JBoss KeyCloak versions prior to 1.0.3.Final

Description: The issue allows remote attackers to cause a denial of service (resource consumption) by supplying a large value in the size parameter to the "auth/qrcode" endpoint, related to QR code generation.

Recommendations: For versions prior to 1.0.3.Final, update to version 1.0.3.Final or later to resolve the issue. As a temporary workaround, consider restricting access to the "auth/qrcode" endpoint or limiting the allowed values for the size parameter to prevent exploitation.