Skip to content

Vulnerabilities of Red Hat Red Hat build of Keycloak 22.0.10

Is your version affected?

CVE Summary Score Published
CVE-2023-0657 A flaw was found in Keycloak 3.4 Low Nov 17, 2024
CVE-2023-6787 A flaw was found in Keycloak that occurs from an error in the re-authentication mechanism within… 6.5 Medium Apr 25, 2024
CVE-2023-6717 Keycloak: xss via assertion consumer service url in saml post-binding flow 6.0 Medium Apr 25, 2024
CVE-2023-6544 A flaw was found in the Keycloak package 5.4 Medium Apr 25, 2024
CVE-2023-6484 A log injection flaw was found in Keycloak 5.3 Medium Apr 25, 2024
CVE-2023-3597 A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in… 5.0 Medium Apr 25, 2024
CVE-2024-1249 Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos 7.4 High Apr 17, 2024
CVE-2024-1132 Keycloak: path transversal in redirection validation 8.1 High Apr 17, 2024

Other Red Hat products