Search for packages
Package details: pkg:maven/org.keycloak/keycloak-model-infinispan@22.0.2
purl pkg:maven/org.keycloak/keycloak-model-infinispan@22.0.2
Next non-vulnerable version 23.0.0
Latest non-vulnerable version 23.0.0
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-a3d5-nsyp-aaaf
Aliases:
CVE-2023-4918
GHSA-5q66-v53q-pm35
A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself through registration flow, the "password" and "password-confirm" field from the form will occur as regular user attributes. All users and clients with proper rights and roles are able to read users attributes, allowing a malicious user with minimal access to retrieve the users passwords in clear text, jeopardizing their environment.
22.0.3
Affected by 1 other vulnerability.
VCID-kfzc-yxas-aaad
Aliases:
CVE-2023-6291
GHSA-mpwq-j3xf-7m5w
The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted
23.0.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:51:40.438729+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 36.1.3
2025-06-20T16:42:19.863235+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 36.1.3
2025-06-20T16:42:12.058058+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf None 36.1.3
2025-06-03T23:29:00.006703+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 36.1.0
2025-06-03T23:20:46.015591+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 36.1.0
2025-06-03T23:20:39.024122+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf None 36.1.0
2025-06-02T23:26:39.572967+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 36.1.2
2025-06-02T23:17:56.957684+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 36.1.2
2025-06-02T23:17:48.933585+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf None 36.1.2
2025-04-03T21:52:43.382092+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 36.0.0
2025-04-03T21:33:54.255831+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 36.0.0
2025-04-03T21:33:42.566016+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf None 36.0.0
2025-02-18T03:41:24.051507+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 35.1.0
2025-02-18T03:41:23.686797+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf None 35.1.0
2025-02-18T01:06:38.740741+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 35.1.0
2024-11-21T00:59:37.422215+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 35.0.0
2024-11-20T23:31:18.017090+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 35.0.0
2024-11-19T00:48:14.520123+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 34.3.2
2024-11-18T23:20:27.591827+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 34.3.2
2024-10-08T01:20:10.683645+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 34.0.2
2024-10-08T00:17:35.253462+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 34.0.2
2024-09-23T00:31:33.389856+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 34.0.1
2024-09-17T22:41:33.764331+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 34.0.1
2024-04-24T03:56:04.485063+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 34.0.0rc4
2024-04-24T03:56:04.052901+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf None 34.0.0rc4
2024-04-24T02:42:40.177866+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-6291.yml 34.0.0rc4
2024-01-10T06:36:34.544364+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 34.0.0rc2
2024-01-10T06:36:34.120598+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf None 34.0.0rc2
2024-01-03T23:23:04.953847+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf None 34.0.0rc1
2024-01-03T18:03:50.230059+00:00 GitLab Importer Affected by VCID-a3d5-nsyp-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-model-infinispan/CVE-2023-4918.yml 34.0.0rc1