Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7.6::el8 | rh-sso7-keycloak | 0:18.0.6-1.redhat_00001.1.el8sso |
| Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7.6::el8 | rh-sso7-keycloak-server | 0:18.0.6-1.redhat_00001.1.el8sso |
Vulnerabilities 31
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025 -
Critical 9.8CVE-2021-44906 Public exploit
Prototype Pollution in minimist
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
-
Critical 9.8CVE-2022-45047 Public exploit
Apache MINA SSHD: Java unsafe deserialization vulnerability
Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSH…
-
Critical 9.8CVE-2022-46364 Public exploit
Apache CXF SSRF Vulnerability
A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.
-
High 8.7CVE-2023-0264 Public exploit
Keycloak vulnerable to user impersonation via stolen UUID code
A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and g…
-
High 8.3
Remote Code execution in SnakeYAML
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrust…
-
High 8.1CVE-2022-4137 Public exploit
Keycloak: reflected xss attack
A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrato…
-
High 7.5
glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
-
High 7.5
Path Traversal in Moment.js
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is direct…
-
High 7.5
Denial of Service (DoS)
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
-
High 7.5
Inefficient Regular Expression Complexity in moment
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 par…
-
High 7.5
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable
A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.
-
High 7.5
Uncontrolled Resource Consumption in Jackson-databind
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.
-
High 7.5
Uncontrolled Resource Consumption in FasterXML jackson-databind
In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for des…
-
High 7.5
Jettison Out-of-bounds Write vulnerability
Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
-
High 7.5
Apache CXF directory listing / code exfiltration
A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect-que…
-
High 7.1CVE-2022-46175 Public exploit
Prototype Pollution in JSON5 via Parse Method
JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `…
-
Medium 6.9
jQuery has a potential XSS vulnerability
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…
-
Medium 6.8
Keycloak: session takeover with oidc offline refreshtokens
A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root session validation, and the reuse of session ids across root and user authenticatio…
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
-
Medium 6.5
Stack Buffer Overflow in Jettison
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may su…
-
Medium 6.5
Stack Buffer Overflow in Jettison
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may su…
-
Medium 6.4
Keycloak: xss on impersonation under specific circumstances
A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, resulting in a Cross-site scripting (XSS) vulnerability.
-
Medium 6.1CVE-2018-14040 Public exploit
Bootstrap vulnerable to Cross-Site Scripting (XSS)
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
-
Medium 6.1CVE-2018-14042 Public exploit
Bootstrap Cross-site Scripting vulnerability
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
-
Medium 6.1
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…
-
Medium 5.4CVE-2022-1274 Public exploit
HTML Injection in Keycloak Admin REST API
A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.
-
Low 3.8
Keycloak has lack of validation of access token on client registrations endpoint
A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.
-
Unscored —
A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1601614
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1601617
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1701972
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1828406
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2031904
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2066009
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2072009
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073157
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2105075
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2117506
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2126789
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2129706
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2129707
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2129709
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2135244
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2135247
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2135770
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2135771
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2138971
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2140597
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2141404
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2145194
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2148496
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2150009
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2155681
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2155682
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2155970
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2156263
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2156324
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2158585
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2160585
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1044.json
-
report
https://access.redhat.com/security/cve/CVE-2018-14040
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-14040
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-14040
-
report
https://access.redhat.com/security/cve/CVE-2018-14042
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-14042
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-14042