Skip to content
OpenAdvisories

Package · npm

keycloak-connect

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.1
    CVE-2022-2237

    keycloak-connect contains Open redirect vulnerability in the Node.js adapter

    A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.

    keycloak-connect npm
  • Medium 4.7
    CVE-2019-10157

    Forced Logout in keycloak-connect

    It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from the server in its backchannel logout . An attacker with local access could use this to construct a malicious web token setting an NBF paramet…

    Red Hat keycloak keycloak-connect npm
  • Critical 9.8
    CVE-2017-7474

    keycloak-connect and keycloak-js improperly handle invalid tokens

    It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.

    Red Hat Keycloak Node.js adapter keycloak-connect keycloak-js npm