Skip to content
OpenAdvisories

Package · npm

keycloak-connect

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-2237

    keycloak-connect contains Open redirect vulnerability in the Node.js adapter

    A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.

    keycloak-connect npm
  • Medium 4.7
    CVE-2019-10157

    Forced Logout in keycloak-connect

    It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from the server in its backchannel logout . An attacker with local access could use this to construct a malicious web token setting an NBF paramet…

    Red Hat keycloak keycloak-connect npm