redhat.com Keycloak vulnerabilities

4 published CVEs name redhat.com Keycloak among the affected products.

Critical 1High 0Medium 2Low 1Not scored 0

Newest CVEs

CVE-2023-0264
A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain…
redhat.com · Keycloak
Medium5.0
CVE-2023-0105
A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow…
redhat.com · Keycloak
Medium6.5
CVE-2023-0091
A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker…
redhat.com · Keycloak
Low3.8
CVE-2022-3782
keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker…
redhat.com · Keycloak
Critical9.1