Keycloak

Keycloak < 24.0.5 is vulnerable to Broken Access Control - Keycloak admin API allows low privilege users to use administrative functions