Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform 6/org.keycloak-keycloak-parent

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flowCVE-2023-6717 · GHSA-8RMM-GM28-PJ8Q org.keycloak:keycloak-servicesMigration Toolkit for Applications 6/mta/mta-ui-rhel9 MavenRed Hat Medium Fix reported
Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoSCVE-2024-1249 · GHSA-M6Q9-P373-G5Q8 org.keycloak:keycloak-servicesMigration Toolkit for Applications 6/mta/mta-ui-rhel9 MavenRed Hat High Fix reported
logback serialization vulnerabilityCVE-2023-6378 · GHSA-VMQ6-5M68-F53M ch.qos.logback:logback-classicch.qos.logback:logback-core MavenRed Hat High Fix reported
Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned dataCVE-2023-6481 · GHSA-GM62-RW4G-VRC4 ch.qos.logback:logback-coreRed Hat Data Grid 8/logback MavenRed Hat High Fix reported
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTLCVE-2023-49093 · GHSA-37VQ-HR2F-G7H7 org.htmlunit:htmlunitMigration Toolkit for Applications 6/net.sourceforge.htmlunit-htmlunit-jar MavenRed Hat Critical Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Jberet: jberet-core logging database credentialsCVE-2024-1102 · GHSA-9WMF-XF3H-R8PR org.jberet:jberet-coreRed Hat Fuse 7/jberet-core MavenRed Hat Medium Fix reported
Spring Security's spring-security.xsd file is world writableCVE-2023-34042 · GHSA-9GP8-6CG8-7H34 org.springframework.security:spring-security-configRed Hat Decision Manager 7/spring-security-config MavenRed Hat Medium Fix reported
OpenCV: memory leak in wechat_qrcode moduleCVE-2023-2618 Red Hat JBoss Enterprise Application Platform 6/org.keycloak-keycloak-parent Red Hat Medium No fix reported
OpenCV: NULL pointer dereference in wechat_qrcode moduleCVE-2023-2617 Red Hat JBoss Enterprise Application Platform 6/org.keycloak-keycloak-parent Red Hat Medium No fix reported