Skip to contentRed Hat Build Of Keycloak 22 vulnerabilities
- red hat build of keycloak, build of keycloak 22, build of keycloak 24 +13 more +15 moreKeycloak: vulnerable redirect uri validation results in open redirecCVE-2024-8883Fix available6.1 Medium
- red hat build of keycloak, build of keycloak 22, build of keycloak 24 +8 more +10 moreKeycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloakCVE-2024-8698Public exploitFix available7.7 High
- redhat keycloak, red hat build of keycloak, build of keycloak 22 +8 more +10 moreWildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adaptersCVE-2024-7341Fix available7.1 High
- redhat keycloak, red hat build of keycloak, build of keycloak 22 +11 more +13 moreKeycloak: potential bypass of brute force protectionCVE-2024-4629Fix available6.5 Medium
- red hat build of keycloak, build of keycloak 22, single sign-on 7 +4 more +6 moreKeycloak: leak of configured ldap bind credentials through the keycloak admin consoleCVE-2024-5967Fix available2.7 Low
- red hat build of keycloak, build of keycloak 22, build of keycloak 24 +5 more +7 moreKeycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookieCVE-2024-4540Fix available7.5 High
- red hat build of keycloak 22, build of keycloak 22.0.10, single sign-on 7 +2 moreKeycloak: impersonation via logout token exchangeCVE-2023-0657Fix available3.4 Low
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.10 +2 more +4 moreKeycloak: session hijacking via re-authenticationCVE-2023-6787Fix available6.5 Medium
- red hat build of keycloak 22, build of keycloak 22.0.10, single sign-on 7 +5 more +7 moreKeycloak: log injection during webauthn authentication or registrationCVE-2023-6484Fix available5.3 Medium
- red hat build of keycloak 22, build of keycloak 22.0.10, single sign-on 7.6 for rhel 7 +4 more +6 moreKeycloak: authorization bypassCVE-2023-6544Fix available5.4 Medium
- red hat migration toolkit for applications 6, migration toolkit for applications 7, amq broker 7 +18 more +20 moreKeycloak: xss via assertion consumer service url in saml post-binding flowCVE-2023-6717Fix available6.0 Medium
- red hat build of keycloak 22, build of keycloak 22.0.10, rhsso 7.6.8 +2 moreKeycloak: secondary factor bypass in step-up authenticationCVE-2023-3597Fix available5.0 Medium
- red hat build of keycloak 22Keycloak: path traversal in the redirect validationCVE-2024-2419Fix available7.1 High
- red hat migration toolkit for applications 6, migration toolkit for applications 7, amq broker 7 +20 more +22 moreKeycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddosCVE-2024-1249Fix available7.4 High
- redhat keycloak, red hat migration toolkit for runtimes 1 on rhel 8, mta-6.2-rhel-9 +26 more +28 moreKeycloak: path transversal in redirection validationCVE-2024-1132Fix available8.1 High
- redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 moreKeycloak: redirect_uri validation bypassCVE-2023-6291Fix available7.1 High
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.8 +7 more +9 moreKeycloak: open redirect via "form_post.jwt" jarm response modeCVE-2023-6927Fix available4.6 Medium
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.7 +10 more +12 moreKeycloak: reflected xss via wildcard in oidc redirect_uriCVE-2023-6134Fix available4.6 Medium