Skip to content
OpenAdvisories

Vendor

redhat.com

6 known vulnerabilities.

Products

Keycloak 4 Wildfly-elytron 1 RHACM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2023-0264 Public exploit

    Keycloak vulnerable to user impersonation via stolen UUID code

    A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and g…

    redhat.com Keycloak org.keycloak:keycloak-services Maven