Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-gf2j-7qwg-4f5x

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gf2j-7qwg-4f5x

Improper Authentication in Keycloak The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.

gitlab/maven/org.keycloak/keycloak-core/CVE-2018-14637

Improper Authentication The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.