Product · Red Hat

Migration Toolkit for Applications 7

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.4

CVE-2024-1249

Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the applicati…

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Red Hat JBoss Enterprise Application Platform 7 Maven

Apr 17, 2024
High 7.1

CVE-2023-6291

Keycloak: redirect_uri validation bypass

A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other user…

Red Hat Red Hat Single Sign-On 7 Red Hat Data Grid 8 Red Hat Fuse 7 Maven

Jan 26, 2024