Search for packages
| purl | pkg:maven/org.keycloak/keycloak-services@22.0.10 |
| Tags | Ghost |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-m6q9-p373-g5q8
|
Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS A potential security flaw in the "checkLoginIframe" which allows unvalidated cross-origin … |
CVE-2024-1249
|
|
GHSA-7fpj-9hr8-28vh
|
Keycloak vulnerable to impersonation via logout token exchange Keycloak was found to not properly enforce token types when validating signatures … |
CVE-2023-0657
|
|
GHSA-4f53-xh3v-g8x4
|
Keycloak secondary factor bypass in step-up authentication Keycloak does not correctly validate its client step-up authentication. A password-authed attacker could … |
CVE-2023-3597
|
|
GHSA-72vp-xfrc-42xm
|
Keycloak path traversal vulnerability in redirection validation A flaw was found in Keycloak, where it does not properly validate URLs … |
CVE-2024-1132
|
|
GHSA-mrv8-pqfj-7gp5
|
Keycloak path traversal vulnerability in the redirect validation An issue was found in the redirect_uri validation logic that allows for … |
CVE-2024-2419
|
|
GHSA-8rmm-gm28-pj8q
|
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow Keycloak allows arbitrary URLs as SAML Assertion … |
CVE-2023-6717
|
|
GHSA-c9h6-v78w-52wj
|
Keycloak vulnerable to session hijacking via re-authentication A flaw was found in Keycloak. An active keycloak session can be hijacked … |
CVE-2023-6787
|
|
GHSA-46c8-635v-68r2
|
Keycloak Authorization Bypass vulnerability Due to a permissive regular expression hardcoded for filtering allowed hosts to register a dynamic client, … |
CVE-2023-6544
|