Package · Maven

org.keycloak:keycloak-parent

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.1

CVE-2022-4137 Public exploit

Keycloak: reflected xss attack

A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrato…

Red Hat Red Hat Single Sign-On 7 Red Hat Single Sign-On 7.6 for RHEL 8 Red Hat Single Sign-On 7.6 for RHEL 7 Maven

Sep 25, 2023
Critical 9.1

CVE-2022-3782 Public exploit

Keycloak vulnerable to path traversal via double URL encoding

keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and pote…

redhat.com Keycloak org.keycloak:keycloak-parent Maven

Jan 11, 2023