Skip to content
OpenAdvisories
Medium RHSA-2021:0968 2 CVEs

Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 7

Published Sep 20, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7::el7 rh-sso7-keycloak 0:9.0.12-1.redhat_00001.1.el7sso
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7::el7 rh-sso7-keycloak-server 0:9.0.12-1.redhat_00001.1.el7sso

Vulnerabilities 2

  • Medium 5.4
    CVE-2020-7676

    Angular vulnerable to Cross-site Scripting

    angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes parsing behavior, leading to possibly unsanitizing code.

    angular.js angular.js angular Debian Ubuntu npm
  • Unscored —
    CVE-2020-14302

    A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redire…

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.4/html/release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1849206
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1849584
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0968.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-7676
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-7676
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-7676
  • article
    https://snyk.io/vuln/SNYK-JS-ANGULAR-570058
  • report
    https://access.redhat.com/security/cve/CVE-2020-14302
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14302
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14302