Red Hat JBoss Enterprise Application Platform 6/rh-sso7-keycloak
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow | org.keycloak:keycloak-servicesMigration Toolkit for Applications 6/mta/mta-ui-rhel9 | MavenRed Hat | Medium | Fix reported | |
| Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS | org.keycloak:keycloak-servicesMigration Toolkit for Applications 6/mta/mta-ui-rhel9 | MavenRed Hat | High | Fix reported | |
| Jberet: jberet-core logging database credentials | org.jberet:jberet-coreRed Hat Fuse 7/jberet-core | MavenRed Hat | Medium | Fix reported |