Skip to content
OpenAdvisories

Vendor

redhat.com

6 known vulnerabilities.

Products

Keycloak 4 Wildfly-elytron 1 RHACM 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2023-0264 Public exploit

    Keycloak vulnerable to user impersonation via stolen UUID code

    A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and g…

    redhat.com Keycloak org.keycloak:keycloak-services Maven
  • Critical 9.1
    CVE-2022-3782 Public exploit

    Keycloak vulnerable to path traversal via double URL encoding

    keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and pote…

    redhat.com Keycloak org.keycloak:keycloak-parent Maven