Red Hat Red Hat build of Keycloak 22.0.10 vulnerabilities

Newest CVEs

• CVE-2023-0657

  Keycloak: impersonation via logout token exchange

  keycloak

  Low3.4
• CVE-2023-6787

  Keycloak: session hijacking via re-authentication

  keycloak

  Medium6.5
• CVE-2023-6717

  Keycloak: xss via assertion consumer service url in saml post-binding flow

  keycloak

  Medium6.0
• CVE-2023-6544

  Keycloak: authorization bypass

  org.keycloak:keycloak-services

  Medium5.4
• CVE-2023-6484

  Keycloak: log injection during webauthn authentication or registration

  keycloak

  Medium5.3
• CVE-2023-3597

  Keycloak: secondary factor bypass in step-up authentication

  keycloak

  Medium5.0
• CVE-2024-1249

  Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

  keycloak

  High7.4
• CVE-2024-1132

  Keycloak: path transversal in redirection validation

  keycloak

  High8.1