8000 Enforce owner checks when calling the resource set service by pedroigor · Pull Request #49121 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

Enforce owner checks when calling the resource set service - #49121

Merged
stianst merged 1 commit into
keycloak:mainfrom
pedroigor:cve-392
May 20, 2026
Merged

stianst merged 1 commit into
keycloak:mainfrom
pedroigor:cve-392

Conversation

@pedroigor
Copy link
Copy Markdown
Contributor
< 8000 p dir="auto">Closes #392

Closes keycloak#392

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
@stianst
stianst merged commit 4e9b17c into keycloak:main May 20, 2026
88 checks passed
@stianst stianst mentioned this pull request Jun 1, 2026
sashyo pushed a commit to tide-foundation/keycloak-IGA that referenced this pull request Jul 20, 2026
…49121)

Closes keycloak#392

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[CVE-2026-4630] Keycloak Authorization Services Protection API IDOR (Cross-Resource Server Access)

2 participants

0