org.keycloak:keycloak-ldap-federation
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Keycloak leaks configured LDAP bind credentials through the Keycloak admin console | org.keycloak:keycloak-ldap-federation | Maven | Low | Fix reported | |
| Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak | org.keycloak:keycloak-ldap-federationRed Hat Build of Keycloak/keycloak-ldap-federation | MavenRed Hat | Medium | Fix reported | |
| Keycloak Vulnerable to Improper Validation of Specified Quantity in Input | org.keycloak:keycloak-ldap-federation | Maven | Medium | Fix reported | |
| Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization | org.keycloak:keycloak-ldap-federation | Maven | Medium | Fix reported | |
| Keycloak vulnerable to LDAP Injection on UsernameForm Login | org.keycloak:keycloak-ldap-federationorg.keycloak:keycloak-services | MavenRed Hat | Low | Fix reported |