CVE-2017-7474
CriticalSummary
It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.
Risk Assessment
This vulnerability poses a risk of unauthorized access to sensitive data, which could lead to serious security breaches within the organization.
Recommendation
It is recommended to update the Keycloak Node.js adapter to the latest version to eliminate this vulnerability and enhance system security.
Original NVD description (English source)
It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.