org.keycloak:keycloak-parent vulnerabilities (Maven)
26 vulnerabilities.
org.keycloak:keycloak-parentMavenKeycloak Server-Side Request Forgery (SSRF) vulnerability2.7 Loworg.keycloak:keycloak-parentMavenKeycloak: keycloak authorization header parsing leading to potential security control bypass5.3 Mediumorg.keycloak:keycloak-parentMavenKeycloak: reflected xss attack8.1 Highorg.keycloak:keycloak-parentMavenKeycloak vulnerable to path traversal via double URL encoding9.1 Criticalorg.keycloak:keycloak-parentMavenKeycloak: session takeover with oidc offline refreshtokens6.8 Mediumorg.keycloak:keycloak-parentMavenKeycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles3.8 Loworg.keycloak:keycloak-parentMavenIncorrect implementation of lockout feature in Keycloak7.5 Highorg.keycloak:keycloak-parentMavenKeycloak SAML javascript protocol mapper: Uploading of scripts through admin console7.2 Highorg.keycloak:keycloak-parentMavenReflected XSS on clients-registrations endpointNo scoreorg.keycloak:keycloak-parentMavenKeycloak insufficient session expiration7.1 Highorg.keycloak:keycloak-parentMavenCode injection in keycloak7.5 Highorg.keycloak:keycloak-parentMavenGeneration of Error Message Containing Sensitive Information in Keycloak2.7 Loworg.keycloak:keycloak-parentMavenIncorrect Authorization in keycloak5.4 Mediumorg.keycloak:keycloak-parentMavenPath Traversal6.8 Mediumorg.keycloak:keycloak-parentMavenIncorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in Keycloak4.9 Mediumorg.keycloak:keycloak-parentMavenCross-site Scripting in Keycloak6.1 Mediumorg.keycloak:keycloak-parentMavenAllocation of Resources Without Limits or Throttling in Keycloak7.5 Highorg.keycloak:keycloak-parentMavenImproper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak5.3 Mediumorg.keycloak:keycloak-parentMavenImproper Authentication for Keycloak7.1 Highorg.keycloak:keycloak-parentMavenKeycloak Authentication Error9.3 Criticalorg.keycloak:keycloak-parentMavenKeycloak Authentication Error9.3 Criticalorg.keycloak:keycloak-parentMavenKeycloak Improper Bruteforce Detection5.4 Mediumorg.keycloak:keycloak-parentMavenKeycloak vulnerable to cross-site scripting via the state parameter4.6 Mediumorg.keycloak:keycloak-parentMavenKeycloak Oauth Implementation Error7.2 Highorg.keycloak:keycloak-parentMavenKeycloak CSRF Vulnerability7.5 Highorg.keycloak:keycloak-parentMavenKeycloak Reflected XSS5.4 Medium