Redhat Keycloak vulnerabilities, page 3
98 vulnerabilities
Known vulnerabilities in Redhat Keycloak, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-14302redhatkeycloak
EPSS score1.00%
A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same "state" parameter. This flaw allows a malicious user to perform replay attacks.CVE-2020-27826org.keycloakkeycloak-core+4EPSS score0.57%
A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.CVE-2020-27838org.keycloakkeycloak-core+2EPSS score17.94%
A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.CVE-2020-10686keycloakkeycloak+2EPSS score0.65%
A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users.CVE-2020-10770org.keycloakkeycloak-core+3EPSS score69.72%
A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.CVE-2020-10776org.keycloakkeycloak-server-spi-private+2EPSS score0.78%
A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.CVE-2020-10748org.keycloakkeycloak-parent+2EPSS score0.93%
A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker to conduct cross-site scripting or further attacks.CVE-2020-10758org.keycloakkeycloak-parent+3EPSS score1.95%
A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value that exceeds the actual byte count of the request body.CVE-2020-10734org.keycloakkeycloak-oidc-client-adapter-pom+4EPSS score0.21%
A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.CVE-2020-35509org.keycloakkeycloak-core+1EPSS score0.35%
A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity.CVE-2014-3652jboss keycloakjboss keycloak+2EPSS score0.66%
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.CVE-2014-3655jbosskeycloak+3EPSS score0.46%
JBoss KeyCloak is vulnerable to soft token deletion via CSRFCVE-2022-2668org.keycloakkeycloak-parent+2EPSS score0.97%
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabledCVE-2022-1274org.keycloakkeycloak-services+3EPSS score0.70%
A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.CVE-2022-1466org.keycloakkeycloak-core+2EPSS score1.10%
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.CVE-2022-1245org.keycloakkeycloak-services+3EPSS score1.41%
A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a client to gain unauthorized access to additional services.CVE-2022-1438org.keycloakkeycloak-services+1EPSS score0.66%
A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, resulting in a Cross-site scripting (XSS) vulnerability.CVE-2022-0225org.keycloakkeycloak-core+2EPSS score3.20%
A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.CVE-2022-4361org.keycloakkeycloak-services+5EPSS score0.69%
Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.CVE-2022-4137org.keycloakkeycloak-parent+2EPSS score1.19%
A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker.