Security
فارسی
All products

org.keycloak:keycloak-core

Maven · Package
50 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination CVE-2024-10039 · GHSA-93WW-43RR-79V3 org.keycloak:keycloak-coreRed Hat Build of Keycloak/keycloak-core MavenRed Hat High Fix reported
Keycloak Denial of Service vulnerabilityCVE-2023-6841 · GHSA-W97F-W3HQ-36G2 org.keycloak:keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat High Fix reported
keycloak-core: open redirect via "form_post.jwt" JARM response modeCVE-2023-6927 · GHSA-9VM7-V8WJ-3FQW org.keycloak:keycloak-core Maven Medium Fix reported
Keycloak allows cross-site scripting (XSS)CVE-2024-4028 · GHSA-Q4XQ-445G-G6CH org.keycloak:keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Low No fix reported
Keycloak vulnerable to Plaintext Storage of User PasswordCVE-2023-4918 · GHSA-5Q66-V53Q-PM35 org.keycloak:keycloak-core Maven High Fix reported
Keycloak vulnerable to Improper Certificate ValidationCVE-2020-35509 · GHSA-RPJ2-W6FR-79HC org.keycloak:keycloak-core Maven Medium Fix reported
Keycloaks's One Time Passcode (OTP) is valid longer than expiration timeSeverityCVE-2024-7318 · GHSA-XMMM-JW76-Q7VG org.keycloak:keycloak-core Maven Medium Fix reported
Moderate severity vulnerability that affects org.keycloak:keycloak-coreCVE-2017-12161 · GHSA-959Q-32G8-VVP7 org.keycloak:keycloak-coreRed Hat Mobile Application Platform 4/keycloak MavenRed Hat Medium Fix reported
Improper Restriction of Rendered UI Layers or Frames in KeycloakCVE-2020-1728 · GHSA-3GG7-9Q2X-79FC org.keycloak:keycloak-coreRed Hat OpenShift Application Runtimes/keycloak MavenRed Hat Medium No fix reported
Moderate severity vulnerability that affects org.keycloak:keycloak-coreCVE-2016-8629 · GHSA-778X-2MQV-W6XW org.keycloak:keycloak-core Maven Medium Fix reported
Keycloak Open Redirect vulnerabilityCVE-2024-7260 · GHSA-G4GC-RH26-M3P5 org.keycloak:keycloak-core Maven Medium Fix reported
Keycloak users may be able to remove MFA from other users' devicesCVE-2020-10686 · GHSA-9695-W6H2-JPV9 org.keycloak:keycloak-core Maven Medium Fix reported
Keycloak Insufficient Session ExpiryCVE-2020-1724 · GHSA-8XJ2-47XW-Q78C org.keycloak:keycloak-coreRed Hat OpenShift Application Runtimes/keycloak MavenRed Hat Medium Fix reported
Keycloak discloses information without authenticationCVE-2020-27838 · GHSA-PCV5-M2WH-66J3 org.keycloak:keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Medium Fix reported
Keycloak leaks sensitive information in logged exceptionsCVE-2020-1698 · GHSA-QGMM-F2QW-R95F org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak-core MavenRed Hat Medium Fix reported
Keycloak: Impersonation and lockout possible through incorrect handling of email trustCVE-2023-0105 · GHSA-C7XW-P58W-H6FJ org.keycloak:keycloak-core Maven Medium Fix reported
Keycloak Missing authentication for critical functionCVE-2021-20262 · GHSA-XF46-8VVP-4HXX org.keycloak:keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Medium No fix reported
Keycloak Untrusted Certificate Validation vulnerabilityCVE-2023-1664 · GHSA-5CC8-PGP5-7MPM org.keycloak:keycloak-coreMigration Toolkit for Runtimes/org.keycloak-keycloak-core MavenRed Hat Medium Fix reported
JBoss KeyCloak Cross-site Scripting VulnerabilityCVE-2014-3656 · GHSA-PX42-MR8M-CPGH org.keycloak:keycloak-core Maven Medium Fix reported
Improper Input Validation in KeycloakCVE-2020-1714 · GHSA-M6MM-Q862-J366 org.keycloak:keycloak-commonorg.keycloak:keycloak-core MavenRed Hat High Fix reported