RH
Product
Red Hat build of Keycloak 22
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 8Low 2
Watch
Add Red Hat build of Keycloak 22 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6787 | 8.8 | Apr 25 | Keycloak: session hijacking via re-authentication Affected: All versions, or not specified |
| CVE-2024-1132 | 8.1 | Apr 17 | Keycloak: path transversal in redirection validation Affected: All versions, or not specified |
| CVE-2024-8698 | 7.7 | Sep 19 | Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak Affected: All versions, or not specified |
| CVE-2024-4540 | 7.5 | Jun 3 | Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie Affected: All versions, or not specified |
| CVE-2024-1249 | 7.4 | Apr 17 | Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos Affected: All versions, or not specified |
| CVE-2024-7341 | 7.1 | Sep 9 | Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters Affected: All versions, or not specified |
| CVE-2024-2419 | 7.1 | Apr 17 | Keycloak: path traversal in the redirect validation Affected: All versions, or not specified |
| CVE-2023-6291 | 7.1 | Jan 26 | Keycloak: redirect_uri validation bypass Affected: All versions, or not specified |
Showing 8