Medium · 4.3 CVE-2014-3655 EUVD-2022-1888GHSA-237q-6hjp-pchq

JBoss KeyCloak is vulnerable to soft token deletion via CSRF

Published Nov 13, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Description

Vendor	Product	Affected	Fixed
JBoss	KeyCloak	Fixed in version 1.1.0-Alpha1	—

Ecosystem	Package	Affected	Fixed	Record
Maven	org.keycloak:keycloak-services	< 1.0.2.Final	1.0.2.Final	GHSA-237q-6hjp-pchq