keycloak vulnerabilities (Bitnami)
69 vulnerabilities.
keycloakBitnamiKeycloak: keycloak: denial of service via excessive processing of openid connect scope parameters7.5 HighkeycloakBitnamiKeycloak: keycloak: replay of action tokens via improper handling of single-use entries5.3 MediumkeycloakBitnamiKeycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw7.4 HighkeycloakBitnamiKeycloak: keycloak: information disclosure due to redirect_uri validation bypass7.3 HighkeycloakBitnamiKeycloak: keycloak: denial of service due to excessive samlrequest decompression5.3 MediumkeycloakBitnamiKeycloak: keycloak: unauthorized authentication via disabled saml identity provider8.1 HighkeycloakBitnamiKeycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions7.7 HighkeycloakBitnamiKeycloak: keycloak: information disclosure via authorization bypass in admin api3.1 LowkeycloakBitnamiOrg.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest api4.2 MediumkeycloakBitnamiOrg.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint2.7 LowkeycloakBitnamiOrg.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login8.8 HighkeycloakBitnamiOrg.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)8.1 HighkeycloakBitnamiOrg.keycloak/keycloak-services: webauthn attestation statement verification bypass3.1 LowkeycloakBitnamiOrg.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administrators4.9 MediumkeycloakBitnamiOrg.keycloak.authentication: two factor authentication bypass5.4 MediumkeycloakBitnamiWildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters7.1 HighkeycloakBitnamiKeycloak-core: one time passcode (otp) is valid longer than expiration timeseverity4.8 MediumkeycloakBitnamiKeycloak-core: open redirect on account page6.1 MediumkeycloakBitnamiKeycloak: potential bypass of brute force protection6.5 Medium