Skip to content
OpenAdvisories

Vendor

DapperDuckling

1 known vulnerabilities.

Products

keycloak-connector 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2024-53843

    Reflected XSS Vulnerability in Authentication Flow URL Handling in @dapperduckling/keycloak-connector-server

    @dapperduckling/keycloak-connector-server is an opinionated series of libraries for Node.js applications and frontend clients to interface with keycloak. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the authentication flow of the app…

    DapperDuckling keycloak-connector @dapperduckling/keycloak-connector-server npm