CVE-2025-48374 – Zot Keycloak Client Secret Disclosure

May 22, 2025

CVE ID : CVE-2025-48374

Published : May 22, 2025, 9:15 p.m. | 1 hour, 36 minutes ago

Description : zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 (corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f), when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout logs for an example at container startup. Version 2.1.3 (corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f) fixes the issue.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-47181 – Microsoft Edge Link Following Privilege Escalation Vulnerability

Next Article CVE-2025-48373 – Schule Client-Side Role Hijacking Vulnerability

Newest LF Decentralized Trust Lab HOPrS identifies if photos have been altered

Coder reimagines development environments to make them more ideal for AI agents

Report: AI coding productivity gains cancelled out by other friction points that slow developers down

15 Proven Benefits of Outsourcing Node.js Development for Large Organizations

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

Subnautica 2 publisher Krafton reportedly delayed it to 2026 — did it just kill a $250 million bonus for devs in the crib?

Cally – Small, feature-rich calendar components

Cally – Small, feature-rich calendar components

Working with the Command Line and WP-CLI

Access to Care Is Evolving: What Consumer Insights and Behavior Models Reveal

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

CVE-2025-48374 – Zot Keycloak Client Secret Disclosure

Over 1,000 SOHO Devices Hacked in China-linked LapDogs Cyber Espionage Campaign

Blind Eagle Uses Proton66 Hosting for Phishing, RAT Deployment on Colombian Banks

CVE-2025-5852 – Tenda AC6 PPTP Form Set User List Buffer Overflow

WinRAR Vulnerability Let Execute Arbitrary Code Using a Malicious File

I put my Bose QuietComfort Ultra away within hours of testing these headphones

How to Screen Capture Video on Windows 11 (Using Built-In Tools Only)

What’s new in Yumma CSS 3.0?

Disposable Email Detection in Laravel

CVE-2025-20276 – “Cisco Unified CCX Java Deserialization Remote Code Execution Vulnerability”

CVE-2025-5227 – PHPGurukul Small CRM SQL Injection Vulnerability

CVE-2025-48374 – Zot Keycloak Client Secret Disclosure

Related Posts