Skip to content
Red Hat Red Hat build of Keycloak 22.0.10
-
CVE-2023-0657
Low 3.4
Keycloak: impersonation via logout token exchange
0.3%
-
CVE-2023-6787
Medium 6.5
Keycloak: session hijacking via re-authentication
0.7%
-
CVE-2023-6717
Medium 6.0
Keycloak: xss via assertion consumer service url in saml post-binding flow
0.7%
-
CVE-2023-6544
Medium 5.4
Keycloak: authorization bypass
1.1%
-
CVE-2023-6484
Medium 5.3
Keycloak: log injection during webauthn authentication or registration
1.0%
-
CVE-2023-3597
Medium 5.0
Keycloak: secondary factor bypass in step-up authentication
0.6%
-
CVE-2024-1249
High 7.4
Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos
0.4%
-
CVE-2024-1132
High 8.1
Keycloak: path transversal in redirection validation
1.6%