RH
Product
Red Hat build of Keycloak 22
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 8Low 2
Watch
Add Red Hat build of Keycloak 22 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4629 | 6.5 | Sep 3 | Keycloak: potential bypass of brute force protection Affected: All versions, or not specified |
| CVE-2024-8883 | 6.1 | Sep 19 | Keycloak: vulnerable redirect uri validation results in open redirec Affected: All versions, or not specified |
| CVE-2023-6927 | 6.1 | Dec 18 | Keycloak: open redirect via "form_post.jwt" jarm response mode Affected: All versions, or not specified |
| CVE-2023-6717 | 6.0 | Apr 25 | Keycloak: xss via assertion consumer service url in saml post-binding flow Affected: All versions, or not specified |
| CVE-2023-6544 | 5.4 | Apr 25 | Keycloak: authorization bypass Affected: All versions, or not specified |
| CVE-2023-6134 | 5.4 | Dec 14 | Keycloak: reflected xss via wildcard in oidc redirect_uri Affected: All versions, or not specified |
| CVE-2023-6484 | 5.3 | Apr 25 | Keycloak: log injection during webauthn authentication or registration Affected: All versions, or not specified |
| CVE-2023-3597 | 5.0 | Apr 25 | Keycloak: secondary factor bypass in step-up authentication Affected: All versions, or not specified |
Showing 8