Search for packages
purl | pkg:maven/org.keycloak/keycloak-saml-core@4.3.0.Final |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-4n2z-nv4q-dqb1
Aliases: GHSA-xgfv-xpx8-qhcr |
Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-6gmx-q9wm-aaan
Aliases: CVE-2022-2668 GHSA-q2gp-gph3-88x9 GHSA-wf7g-7h6h-678v |
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled |
Affected by 2 other vulnerabilities. |
VCID-79zh-qj1t-7yeg
Aliases: CVE-2024-8698 GHSA-4xx7-2cx3-x473 |
keycloak-saml-core: Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak |
Affected by 0 other vulnerabilities. |
VCID-b76u-hkzd-aaap
Aliases: CVE-2021-3827 GHSA-4pc7-vqv5-5r3v GMS-2022-1098 |
ECP SAML binding bypasses authentication flows |
Affected by 3 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |