Homepage

Improper Privilege Management The advisory has been revoked - it doesn't affect any version of package keycloak-doc  (opens in a new tab)

Threat Intelligence

EPSS
0.45% (38th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-MINIMOSLATEST-KEYCLOAKDOC-13133205
  • published29 Sept 2025
  • disclosed18 Jul 2025
Report a new vulnerability Found a mistake?

Introduced: 18 Jul 2025

CVE-2025-7784  (opens in a new tab)
CWE-269  (opens in a new tab)

Amendment

The Minimos security team deemed this advisory irrelevant for Minimos:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream keycloak-doc package and not the keycloak-doc package as distributed by Minimos.

A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorized elevation of access rights, compromising the intended separation of administrative duties and posing a security risk to the realm.