Skip to content

Vulnerabilities of n/a Keycloak

Is your version affected?

CVE Summary Score Published
CVE-2020-1717 A flaw was found in Keycloak 7.0.1 Not rated Feb 11, 2021
CVE-2020-1725 A flaw was found in keycloak before version 13.0.0 Not rated Jan 28, 2021
CVE-2020-14302 A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication,… Not rated Dec 15, 2020
CVE-2020-10770 A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using… Not rated Dec 15, 2020
CVE-2020-10776 A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri… Not rated Nov 17, 2020
CVE-2020-14389 It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources… Not rated Nov 17, 2020
CVE-2020-1694 A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the… Not rated Sep 16, 2020
CVE-2020-10748 A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some… Not rated Sep 16, 2020
CVE-2020-10758 A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests… Not rated Sep 16, 2020
CVE-2019-14910 A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used… 9.3 Critical Dec 5, 2019
CVE-2019-14909 A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any… 9.3 Critical Dec 4, 2019

Other n/a products