TI-2024-01049 CVE-2024-1132 · GHSA-72vp-xfrc-42xm
Keycloak: path transversal in redirection validation
Priority HIGH 70
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect.
RHSA-2024:1866
Red Hat Single Sign-On 7.6.8 security update
Released 2024-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHSSO 7.6.8
Fixes 6 records
TI-2024-01518 CVE-2024-1635 · GHSA-w6qf-42m7-vh68
Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol
Priority MEDIUM 40
A vulnerability was found in Undertow.
TI-2024-01163 CVE-2024-1249 · GHSA-m6q9-p373-g5q8
Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos
Priority LOW 33
A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages.
TI-2023-05942 CVE-2023-6484 · GHSA-j628-q885-8gr5
Keycloak: log injection during webauthn authentication or registration
Priority LOW 32
A log injection flaw was found in Keycloak.
TI-2023-05996 CVE-2023-6544 · GHSA-46c8-635v-68r2
Keycloak: authorization bypass
Priority LOW 27
A flaw was found in the Keycloak package.
TI-2023-03357 CVE-2023-3597 · GHSA-4f53-xh3v-g8x4
Keycloak: secondary factor bypass in step-up authentication
Priority LOW 24
A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in org.keycloak.authentication.