-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.keycloak:keycloak-quarkus-server | maven | < 24.0.9 | 24.0.9 |
| org.keycloak:keycloak-quarkus-server | maven | >= 25.0.0, < 26.0.6 | 26.0.6 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from runtime properties being captured during build. The PropertyMappers.getValue() function was modified to add rebuild-time filtering of runtime properties, indicating it previously processed these values. The Build command's profile validation was strengthened to use parsed command context instead of CLI args, showing prior indirect exposure vectors. These functions directly handled property processing and command validation where sensitive data could be embedded.