Red Hat Security Advisory

RHSA-2024:3576

Red Hat build of Keycloak 24.0.5 Images enhancement and security update

Released 2024-06-03 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat build of Keycloak 24 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator

TI-2024-04227 CVE-2024-4540 · GHSA-69fp-7c8p-crjr

MEDIUM 40

A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2024-06-03 Fixed in 22.0.11-2, 22-15 +8 CWE-312