TI-2025-00506 CVE-2025-0604 · GHSA-2p82-5wwr-43cw
Keycloak-ldap-federation: authentication bypass due to missing ldap bind after password reset in keycloak
Priority LOW 26
A flaw was found in Keycloak.
RHSA-2025:2544
Red Hat build of Keycloak 26.0.10 Images Update
Released 2025-03-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat build of Keycloak 26.0 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator
Fixes 2 records
TI-2025-01195 CVE-2025-1391 · GHSA-gvgg-2r3r-53x7
Keycloak-services: improper authorization in keycloak organization mapper allows unauthorized organization claims
Priority LOW 25
A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a user if their username or email matches the organization’s domain pattern.