CVE-2025-5416

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /admin/serverinfo endpoint can inadvertently provide sensitive environment information.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-497

Affected software

No affected versions have been published.

Timeline

Published
Jun 20, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-541607.8Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop beCVE-2025-541614.9An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gainsCVE-2025-541624.9A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can theCVE-2025-541634.9A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, thCVE-2025-541644.9An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an adminiCVE-2025-541654.9An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an adminiCVE-2025-541664.9An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an adminiCVE-2025-541677.2A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains an administrator accoCVE-2025-541684.8A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, thCVE-2025-541696.5An out-of-bounds read vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then expCVE-2025-54176.1An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat DevelopCVE-2025-541706.5An out-of-bounds read vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then expl