Redhat Keycloak vulnerabilities
98 vulnerabilities
Known vulnerabilities in Redhat Keycloak, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-14655org.keycloakkeycloak-parent+3
EPSS score1.19%
A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via the 'state'-parameter in the authentication URL. This allows an XSS-Attack upon succesfully login.CVE-2018-14637org.keycloakkeycloak-core+2EPSS score0.81%
The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.CVE-2018-14658org.keycloakkeycloak-core+2EPSS score1.10%
A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attackCVE-2018-14657org.keycloakkeycloak-parent+3EPSS score1.16%
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.CVE-2018-10894org.keycloakkeycloak-saml-adapter-core+4EPSS score0.35%
It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.CVE-2018-10912org.keycloakkeycloak-core+3EPSS score1.31%
keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the server.CVE-2021-20262org.keycloakkeycloak-core+2EPSS score0.33%
A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.CVE-2021-20222org.keycloakkeycloak-parent+1EPSS score1.19%
A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.CVE-2021-20195org.keycloakkeycloak-core+1EPSS score1.25%
A flaw was found in keycloak in versions before 13.0.0. A Self Stored XSS attack vector escalating to a complete account takeover is possible due to user-supplied data fields not being properly encoded and Javascript code being used to process the data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.CVE-2021-20323org.keycloakkeycloak-core+1EPSS score37.25%
A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.CVE-2021-20202org.keycloakkeycloak-core+1EPSS score0.30%
A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to the contents that keycloak stores in this directory. The highest threat from this vulnerability is to data confidentiality and integrity.CVE-2021-4133org.keycloakkeycloak-services+3EPSS score1.37%
A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled.CVE-2021-3461org.keycloakkeycloak-parent+2EPSS score0.30%
A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name].CVE-2021-3513org.keycloakkeycloak-parent+1EPSS score0.80%
A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.CVE-2021-3827org.keycloakkeycloak-saml-core+3EPSS score1.11%
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.CVE-2021-3856org.keycloakkeycloak-core+1EPSS score1.13%
ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.CVE-2021-3637org.keycloakkeycloak-model-infinispan+2EPSS score1.13%
A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack.CVE-2021-3632org.keycloakkeycloak-core+2EPSS score1.13%
A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow.CVE-2021-3754org.keycloakkeycloak-services+2EPSS score2.15%
A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may cause trouble in getting password recovery email in case the user forgets the password.CVE-2016-8627redhatjboss_enterprise_application_platform+2EPSS score2.60%
admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.