DapperDuckling

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

DapperDuckling records in CISA KEV

No DapperDuckling vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-36039 CVE-2024-53843 · GHSA-w5rq-g9r6-vrcg

Reflected XSS Vulnerability in Authentication Flow URL Handling in @dapperduckling/keycloak-connector-server

LOW 38

@dapperduckling/keycloak-connector-server is an opinionated series of libraries for Node.js applications and frontend clients to interface with keycloak.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00539 Published 2024-11-25 Fixed in 2.5.5 CWE-79

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0