Skip to content
OpenAdvisories

Package · Maven

org.keycloak:keycloak-core

49 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-20323 Public exploit Scanner template EPSS 37%

    Cross-site Scripting in Keycloak

    A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

    org.keycloak:keycloak-core Maven
  • Medium 6.5
    CVE-2020-27838 Public exploit Scanner template EPSS 18%

    Keycloak discloses information without authentication

    A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL l…

    org.keycloak:keycloak-core Maven
  • Medium 5.3
    CVE-2020-10770 Public exploit Scanner template EPSS 70%

    Keycloak vulnerable to Server-Side Request Forgery

    A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.

    org.keycloak:keycloak-core Maven
  • Medium 6.1
    CVE-2014-3656 Public exploit

    JBoss KeyCloak Cross-site Scripting Vulnerability

    JBoss KeyCloak: XSS in login-status-iframe.html

    JBoss KeyCloak JBoss KeyCloak org.keycloak:keycloak-core Maven