[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-8698":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T22:22:45.889Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":42,"related":43,"reserved_at":9,"published_at":46,"modified_at":47,"state":48,"summary":49,"references_raw":58,"kevs":140,"epss":141,"epss_history":144,"metrics":375,"affected":385},"CVE-2024-8698","A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[],[29],"GHSA-xgfv-xpx8-qhcr",[],[32,34,36,38,40],{"_key":33},"RHSA-2024:6878",{"_key":35},"RHSA-2024:6879",{"_key":37},"RHSA-2024:6880",{"_key":39},"RHSA-2024:8823",{"_key":41},"RHSA-2024:8824",[],[44],{"_key":45},"CGA-F56H-QC3P-CH97","2024-09-19T15:48:18.464Z","2026-04-01T11:23:23.697Z","Deferred",{"cisa_kev":50,"cisa_ransomware":50,"cisa_vendor":9,"epss_severity":51,"epss_score":52,"severity":53,"severity_score":54,"severity_version":55,"severity_source":56,"severity_vector":57,"severity_status":48},false,"low",0.0203,"high",7.7,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L",[59,68,72,76,80,84,88,92,96,100,104,108,112,117,122,126,131,135],{"url":60,"sources":61,"tags":64},"https://access.redhat.com/errata/RHSA-2024:6878",[56,62,63],"nvd","osv_maven",[65,66,67],"Vendor Advisory","X Refsource REDHAT","WEB",{"url":69,"sources":70,"tags":71},"https://access.redhat.com/errata/RHSA-2024:6879",[56,62,63],[65,66,67],{"url":73,"sources":74,"tags":75},"https://access.redhat.com/errata/RHSA-2024:6880",[56,62,63],[65,66,67],{"url":77,"sources":78,"tags":79},"https://access.redhat.com/errata/RHSA-2024:6882",[56,62,63],[65,66,67],{"url":81,"sources":82,"tags":83},"https://access.redhat.com/errata/RHSA-2024:6886",[56,62,63],[65,66,67],{"url":85,"sources":86,"tags":87},"https://access.redhat.com/errata/RHSA-2024:6887",[56,62,63],[65,66,67],{"url":89,"sources":90,"tags":91},"https://access.redhat.com/errata/RHSA-2024:6888",[56,62,63],[65,66,67],{"url":93,"sources":94,"tags":95},"https://access.redhat.com/errata/RHSA-2024:6889",[56,62,63],[65,66,67],{"url":97,"sources":98,"tags":99},"https://access.redhat.com/errata/RHSA-2024:6890",[56,62,63],[65,66,67],{"url":101,"sources":102,"tags":103},"https://access.redhat.com/errata/RHSA-2024:8823",[56,62,63],[65,66,67],{"url":105,"sources":106,"tags":107},"https://access.redhat.com/errata/RHSA-2024:8824",[56,62,63],[65,66,67],{"url":109,"sources":110,"tags":111},"https://access.redhat.com/errata/RHSA-2024:8826",[56,62,63],[65,66,67],{"url":113,"sources":114,"tags":115},"https://access.redhat.com/security/cve/CVE-2024-8698",[56,62,63],[116,66,67],"VDB Entry",{"url":118,"sources":119,"tags":120},"https://bugzilla.redhat.com/show_bug.cgi?id=2311641",[56,62,63],[121,66,67],"Issue Tracking",{"url":123,"sources":124,"tags":125},"https://github.com/keycloak/keycloak/security/advisories/GHSA-xgfv-xpx8-qhcr",[63],[67],{"url":127,"sources":128,"tags":129},"https://nvd.nist.gov/vuln/detail/CVE-2024-8698",[63],[130],"Advisory",{"url":132,"sources":133,"tags":134},"https://github.com/keycloak/keycloak/releases/tag/25.0.6",[63],[67],{"url":136,"sources":137,"tags":138},"https://github.com/keycloak/keycloak",[63],[139],"PACKAGE",[],{"date":142,"score":52,"percentile":143},"2026-07-05",0.78696,[145,149,151,154,156,159,161,163,165,167,169,171,173,175,177,181,184,187,189,193,195,197,200,203,205,207,209,212,215,218,221,224,228,231,234,237,239,242,245,248,251,253,255,258,260,262,266,268,270,273,275,277,280,282,285,288,290,292,295,298,301,303,306,309,311,313,317,319,321,324,326,328,331,333,335,338,340,342,344,346,348,351,353,355,359,362,365,368,370,372],{"date":146,"score":147,"percentile":148},"2025-11-04",0.80968,0.99099,{"date":150,"score":147,"percentile":148},"2025-11-05",{"date":152,"score":147,"percentile":153},"2025-11-06",0.99097,{"date":155,"score":147,"percentile":153},"2025-11-07",{"date":157,"score":147,"percentile":158},"2025-11-08",0.99098,{"date":160,"score":147,"percentile":158},"2025-11-09",{"date":162,"score":147,"percentile":158},"2025-11-10",{"date":164,"score":147,"percentile":153},"2025-11-11",{"date":166,"score":147,"percentile":148},"2025-11-12",{"date":168,"score":147,"percentile":148},"2025-11-13",{"date":170,"score":147,"percentile":148},"2025-11-14",{"date":172,"score":147,"percentile":158},"2025-11-15",{"date":174,"score":147,"percentile":153},"2025-11-16",{"date":176,"score":147,"percentile":158},"2025-11-17",{"date":178,"score":179,"percentile":180},"2025-11-18",0.29397,0.96324,{"date":182,"score":179,"percentile":183},"2025-11-19",0.96325,{"date":185,"score":179,"percentile":186},"2025-11-20",0.96326,{"date":188,"score":147,"percentile":148},"2025-11-21",{"date":190,"score":191,"percentile":192},"2025-11-22",0.83189,0.99214,{"date":194,"score":191,"percentile":192},"2025-11-23",{"date":196,"score":191,"percentile":192},"2025-11-24",{"date":198,"score":191,"percentile":199},"2025-11-25",0.99216,{"date":201,"score":191,"percentile":202},"2025-11-26",0.99217,{"date":204,"score":191,"percentile":202},"2025-11-27",{"date":206,"score":191,"percentile":202},"2025-11-28",{"date":208,"score":191,"percentile":202},"2025-11-29",{"date":210,"score":191,"percentile":211},"2025-11-30",0.99219,{"date":213,"score":191,"percentile":214},"2025-12-01",0.99231,{"date":216,"score":191,"percentile":217},"2025-12-02",0.99232,{"date":219,"score":220,"percentile":148},"2025-12-03",0.80667,{"date":222,"score":220,"percentile":223},"2025-12-04",0.99086,{"date":225,"score":226,"percentile":227},"2025-12-05",0.77996,0.98954,{"date":229,"score":147,"percentile":230},"2025-12-06",0.99101,{"date":232,"score":147,"percentile":233},"2025-12-07",0.99102,{"date":235,"score":147,"percentile":236},"2025-12-08",0.99103,{"date":238,"score":147,"percentile":236},"2025-12-09",{"date":240,"score":147,"percentile":241},"2025-12-10",0.99104,{"date":243,"score":147,"percentile":244},"2025-12-11",0.99105,{"date":246,"score":147,"percentile":247},"2025-12-12",0.99106,{"date":249,"score":226,"percentile":250},"2025-12-13",0.98957,{"date":252,"score":226,"percentile":250},"2025-12-14",{"date":254,"score":226,"percentile":250},"2025-12-15",{"date":256,"score":226,"percentile":257},"2025-12-16",0.98958,{"date":259,"score":226,"percentile":257},"2025-12-17",{"date":261,"score":226,"percentile":250},"2025-12-18",{"date":263,"score":264,"percentile":265},"2025-12-19",0.79123,0.99015,{"date":267,"score":264,"percentile":265},"2025-12-20",{"date":269,"score":264,"percentile":265},"2025-12-21",{"date":271,"score":264,"percentile":272},"2025-12-22",0.99016,{"date":274,"score":264,"percentile":272},"2025-12-23",{"date":276,"score":264,"percentile":272},"2025-12-24",{"date":278,"score":264,"percentile":279},"2025-12-25",0.99017,{"date":281,"score":264,"percentile":279},"2025-12-26",{"date":283,"score":264,"percentile":284},"2025-12-27",0.99026,{"date":286,"score":264,"percentile":287},"2025-12-28",0.99018,{"date":289,"score":264,"percentile":287},"2025-12-29",{"date":291,"score":264,"percentile":287},"2025-12-30",{"date":293,"score":264,"percentile":294},"2025-12-31",0.99019,{"date":296,"score":264,"percentile":297},"2026-01-01",0.99031,{"date":299,"score":264,"percentile":300},"2026-01-02",0.99032,{"date":302,"score":264,"percentile":300},"2026-01-03",{"date":304,"score":264,"percentile":305},"2026-01-04",0.99021,{"date":307,"score":264,"percentile":308},"2026-01-05",0.9902,{"date":310,"score":264,"percentile":308},"2026-01-06",{"date":312,"score":264,"percentile":294},"2026-01-07",{"date":314,"score":315,"percentile":316},"2026-01-08",0.80217,0.99077,{"date":318,"score":315,"percentile":316},"2026-01-09",{"date":320,"score":315,"percentile":316},"2026-01-10",{"date":322,"score":315,"percentile":323},"2026-01-11",0.99074,{"date":325,"score":315,"percentile":323},"2026-01-12",{"date":327,"score":315,"percentile":323},"2026-01-13",{"date":329,"score":315,"percentile":330},"2026-01-14",0.99075,{"date":332,"score":315,"percentile":330},"2026-01-15",{"date":334,"score":315,"percentile":330},"2026-01-16",{"date":336,"score":315,"percentile":337},"2026-01-17",0.99076,{"date":339,"score":315,"percentile":316},"2026-01-18",{"date":341,"score":315,"percentile":316},"2026-01-19",{"date":343,"score":315,"percentile":316},"2026-01-20",{"date":345,"score":315,"percentile":316},"2026-01-21",{"date":347,"score":315,"percentile":316},"2026-01-22",{"date":349,"score":315,"percentile":350},"2026-01-23",0.99078,{"date":352,"score":315,"percentile":350},"2026-01-24",{"date":354,"score":315,"percentile":316},"2026-01-25",{"date":356,"score":357,"percentile":358},"2026-01-26",0.79162,0.99022,{"date":360,"score":357,"percentile":361},"2026-01-27",0.99023,{"date":363,"score":357,"percentile":364},"2026-01-28",0.99024,{"date":366,"score":357,"percentile":367},"2026-01-29",0.99025,{"date":369,"score":357,"percentile":364},"2026-01-30",{"date":371,"score":357,"percentile":364},"2026-01-31",{"date":373,"score":357,"percentile":374},"2026-02-01",0.99033,[376,381,383],{"source":56,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":377,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":378,"vectorString":57,"impactScore":379,"exploitabilityScore":380},"HIGH",8.8,4.6,{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":382,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":378,"vectorString":57,"impactScore":379,"exploitabilityScore":380},{"source":63,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":384,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":9,"vectorString":57,"impactScore":379,"exploitabilityScore":380},[386],{"ecosystem":387,"name":388,"vendor":389,"product":390,"cpe_part":9,"purl_type":391,"purl_namespace":389,"purl_name":390,"source":9,"versions":392},"Maven","org.keycloak:keycloak-saml-core","org.keycloak","keycloak-saml-core","maven",[393,399,404],{"version":394,"is_range":395,"range_type":396,"version_start":9,"version_start_type":9,"version_end":397,"version_end_type":398,"fixed_in":9},"lt22_0_13",true,"ecosystem","22.0.13","excluding",{"version":400,"is_range":395,"range_type":396,"version_start":401,"version_start_type":402,"version_end":403,"version_end_type":398,"fixed_in":9},"gte23_0_0_lt24_0_8","23.0.0","including","24.0.8",{"version":405,"is_range":395,"range_type":396,"version_start":406,"version_start_type":402,"version_end":407,"version_end_type":398,"fixed_in":9},"gte25_0_0_lt25_0_6","25.0.0","25.0.6"]