Red Hat JBoss Enterprise Application Platform 6/keycloak
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow | org.keycloak:keycloak-servicesMigration Toolkit for Applications 6/mta/mta-ui-rhel9 | MavenRed Hat | Medium | Fix reported | |
| Keycloak path traversal vulnerability in redirection validation | org.keycloak:keycloak-servicesRed Hat Decision Manager 7/keycloak | MavenRed Hat | High | Fix reported | |
| Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS | org.keycloak:keycloak-servicesMigration Toolkit for Applications 6/mta/mta-ui-rhel9 | MavenRed Hat | High | Fix reported | |
| Keycloak vulnerable to path traversal via double URL encoding | org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak | MavenRed Hat | Critical | Fix reported |