CVE-2024-10492

Name of the Vulnerable Software and Affected Versions: Keycloak (affected versions not specified) Red Hat products (affected versions not specified)

Description: A vulnerability was found in Keycloak, allowing a user with high privileges to read sensitive information from a Vault file that is not within the expected context. This requires previous high access to the Keycloak server to perform resource creation. The issue is related to incorrect external management of file names or paths due to incorrect regular expression checking.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.