Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction

Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation

Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation

Keycloak: keycloak: privilege escalation due to oversized subject_token jwt

Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login

A flaw was found in Keycloak that occurs from an error in the re-authentication mechanism within org.keycloak.authentication

Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow

Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers

Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher

Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction

Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant

Org.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled users

Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion

Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison

Keycloak: cross-session email verification proof not bound to upstream identity in first-broker-login

Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak

Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.

Keycloak: keycloak: unauthorized authentication via disabled saml identity provider

Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect

Keycloak: group-admin escalation to realm-admin

Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions

Keycloak: keycloak: security policy bypass in jwe-encrypted request object processing

Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover

Keycloak: keycloak: denial of service via specially crafted saml input

Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

Undertow: improper state management in proxy protocol parsing causes information leakage

Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass

Keycloak: keycloak: privilege escalation via improper scope mapping enforcement

Keycloak: keycloak: information disclosure due to redirect_uri validation bypass

Wildfly: wildfly vulnerable to cross-site scripting (xss)

Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation

Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission

Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client data

Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

Keycloak: keycloak: unauthorized account access via replayed refresh tokens after cluster restart

Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replay

Keycloak: keycloak: unauthorized resource access and data modification via insecure direct object reference

Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text

Keycloak-services: keycloak-services: client access-type policy condition bypass during client update

Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes

Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes

Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim

Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching

Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter

Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2

Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper

Keycloak: keycloak: privilege escalation through hardcoded role mapper injection