Keycloak

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Keycloak records in CISA KEV

No Keycloak vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Keycloak-nodejs-auth-utils · all components

TI-2017-05120 CVE-2017-7474 · GHSA-mw35-24gh-f82w

MEDIUM 47

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02542 Published 2017-05-12 Partial fix · 3.1.0 CWE-253