Skip to content
Red Hat Red Hat build of Keycloak 24
-
CVE-2024-10492
Low 2.7
Keycloak-quarkus-server: keycloak path trasversal
0.7%
-
CVE-2024-10451
Medium 5.9
Org.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process
0.9%
-
CVE-2024-10270
Medium 6.5
Org.keycloak:keycloak-services: keycloak denial of service
1.2%
-
CVE-2024-9666
Medium 4.7
Org.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerability
0.4%
-
CVE-2024-8883
Medium 6.1
Keycloak: vulnerable redirect uri validation results in open redirec
2.1%
-
CVE-2024-8698
High 7.7
Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak
2.0%
-
CVE-2024-7341
High 7.1
Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters
0.8%
-
CVE-2024-7318
Medium 4.8
Keycloak-core: one time passcode (otp) is valid longer than expiration timeseverity
0.4%
-
CVE-2024-7260
Medium 6.1
Keycloak-core: open redirect on account page
0.6%
-
CVE-2024-4540
High 7.5
Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie
0.6%