RH
Product
Red Hat build of Keycloak 24
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 1
Watch
Add Red Hat build of Keycloak 24 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4540 | 7.5 | Jun 3 | Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie Affected: All versions, or not specified |
| CVE-2024-7341 | 7.1 | Sep 9 | Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters Affected: All versions, or not specified |
| CVE-2024-10270 | 6.5 | Nov 25 | Org.keycloak:keycloak-services: keycloak denial of service Affected: All versions, or not specified |
| CVE-2024-7260 | 6.1 | Sep 9 | Keycloak-core: open redirect on account page Affected: All versions, or not specified |
| CVE-2024-10451 | 5.9 | Nov 25 | Org.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process Affected: All versions, or not specified |
| CVE-2024-7318 | 4.8 | Sep 9 | Keycloak-core: one time passcode (otp) is valid longer than expiration timeseverity Affected: All versions, or not specified |
| CVE-2024-9666 | 4.7 | Nov 25 | Org.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerability Affected: All versions, or not specified |
| CVE-2024-10492 | 2.7 | Nov 25 | Keycloak-quarkus-server: keycloak path trasversal Affected: All versions, or not specified |
Showing 8