Security
فارسی
All products

Red Hat Fuse 7/keycloak

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flowCVE-2023-6717 · GHSA-8RMM-GM28-PJ8Q org.keycloak:keycloak-servicesMigration Toolkit for Applications 6/mta/mta-ui-rhel9 MavenRed Hat Medium Fix reported
Keycloak path traversal vulnerability in redirection validationCVE-2024-1132 · GHSA-72VP-XFRC-42XM org.keycloak:keycloak-servicesRed Hat Decision Manager 7/keycloak MavenRed Hat High Fix reported
Generation of Error Message Containing Sensitive Information in KeycloakCVE-2020-1717 · GHSA-RVFC-G8J5-9CCF org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat Low No fix reported
Keycloak Authentication ErrorCVE-2018-10894 · GHSA-XVV8-8WH9-9FH2 org.keycloak:keycloak-saml-adapter-coreorg.keycloak:keycloak-services MavenRed Hat Medium Fix reported
Keycloak Open RedirectCVE-2018-14658 · GHSA-3QH2-MCCC-Q5M6 org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak MavenRed Hat Medium No fix reported
Keycloak Unauthenticated AccessCVE-2019-14832 · GHSA-8PRC-58J4-M55Q org.keycloak:keycloak-model-infinispanorg.keycloak:keycloak-model-jpa MavenRed Hat High Fix reported
Keycloak Improper Bruteforce DetectionCVE-2018-14657 · GHSA-85V8-VX4W-Q684 org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat High Fix reported
Keycloak vulnerable to cross-site scripting via the state parameterCVE-2018-14655 · GHSA-458H-WV48-FQ75 org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat Medium No fix reported
Keycloak vulnerable to path traversal via double URL encoding CVE-2022-3782 · GHSA-G8Q8-FGGX-9R3Q org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat Critical Fix reported
OIDC Logout redirect in keycloakCVE-2020-10734 · GHSA-RVJG-GXWX-J5GF org.keycloak:keycloak-oidc-client-adapter-pomRed Hat Fuse 7/keycloak MavenRed Hat Low Fix reported
Improper Certificate Validation and Insufficient Verification of Data Authenticity in KeycloakCVE-2019-3875 · GHSA-38CG-GG9J-Q9J9 org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak MavenRed Hat Medium No fix reported
Exposure of Sensitive Information to an Unauthorized Actor in KeycloakCVE-2019-3868 · GHSA-GC52-XJ6P-9PXP org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak MavenRed Hat Medium Fix reported
Improper Verification of Cryptographic Signature in keycloakCVE-2019-10201 · GHSA-4FGQ-GQ9G-3RW7 org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak MavenRed Hat Medium Fix reported
Improper Input Validation and Cross-Site Request Forgery in KeycloakCVE-2019-10199 · GHSA-P5XP-6VPF-JWVH org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak MavenRed Hat High Fix reported
keycloak: missing input validation in IDP authorization URLsCVE-2020-1727 Red Hat Fuse 7/keycloakRed Hat OpenShift Application Runtimes/keycloak Red Hat Medium No fix reported