Vulnerabilities

TI-2024-06802 CVE-2024-7341 · GHSA-5rxp-2rhr-qwqv

Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

LOW 35

A session fixation issue was discovered in the SAML adapters provided by Keycloak.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00848 Published 2024-09-09 Fixed in 22.0.12, 24.0.7 +10 CWE-384

TI-2024-06779 CVE-2024-7318 · GHSA-xmmm-jw76-q7vg

LOW 22

A vulnerability was found in Keycloak.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00393 Published 2024-09-09 Fixed in 24.0.7, 25.0.4 +2 CWE-324

TI-2024-06725 CVE-2024-7260 · GHSA-g4gc-rh26-m3p5

LOW 28

An open redirect vulnerability was found in Keycloak.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00579 Published 2024-09-09 Fixed in 24.0.7, 24.0.7-4 +1 CWE-601