TI-2024-01049 CVE-2024-1132 · GHSA-72vp-xfrc-42xm
Keycloak: path transversal in redirection validation
Priority HIGH 70
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect.
RHSA-2024:1860
Red Hat Single Sign-On 7.6.8 enhancement and security update on RHEL 7
Released 2024-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Single Sign-On 7.6 for RHEL 7 Server rh-sso7-keycloak-18.0.13-1.redhat_00001.1.el7sso, rh-sso7-keycloak-server-18.0.13-1.redhat_00001.1.el7sso
Fixes 5 records
TI-2024-01518 CVE-2024-1635 · GHSA-w6qf-42m7-vh68
Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol
Priority MEDIUM 40
A vulnerability was found in Undertow.
TI-2024-01163 CVE-2024-1249 · GHSA-m6q9-p373-g5q8
Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos
Priority LOW 33
A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages.
TI-2023-05942 CVE-2023-6484 · GHSA-j628-q885-8gr5
Keycloak: log injection during webauthn authentication or registration
Priority LOW 32
A log injection flaw was found in Keycloak.
TI-2023-05996 CVE-2023-6544 · GHSA-46c8-635v-68r2
Keycloak: authorization bypass
Priority LOW 27
A flaw was found in the Keycloak package.