CVE-2024-11736

MediumCVSS 4.9/10Last modified Aug 31, 2026

Description

A vulnerability was found in Keycloak. Admin users may have to access sensitive server environment variables and system properties through user-configurable URLs. When configuring backchannel logout URLs or admin URLs, admin users can include placeholders like ${env.VARNAME} or ${PROPNAME}. The server replaces these placeholders with the actual values of environment variables or system properties during URL processing.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-526

Affected software

No affected versions have been published.

Timeline

Published: Jan 14, 2025
Last modified: Aug 31, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-117379.8CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of th CVE-2024-117387.5A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello me CVE-2024-117399.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Case Informatics Case ERP allows SQL I CVE-2024-11748.2Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security vulnerabilities. HP has released HP ThinPr CVE-2024-117407.3The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. T CVE-2024-117414.3Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected CVE-2024-117425.4A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue a CVE-2024-117434.3A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an un CVE-2024-117449.8A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerabili CVE-2024-117459.8A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function route_static_check of CVE-2024-117465.4The Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin plugin for WordPress is vulnerable to Stor CVE-2024-117476.4The Responsive Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'somryv' shortcode in all versions