Red Hat Migration Toolkit for Applications 6

• CVE-2023-4639 High 7.4 Undertow: cookie smuggling/spoofing 1.1%
• CVE-2023-6717 Medium 6.0 Keycloak: xss via assertion consumer service url in saml post-binding flow 0.7%
• CVE-2024-1249 High 7.4 Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos 0.4%
• CVE-2023-6291 High 7.1 Keycloak: redirect_uri validation bypass 0.9%