5.3

GHSA-4XX7-2CX3-X473: keycloak-saml-core Maven

CVSS: 5.3v4.0MediumPublished
Published 19-09-2024Last modified 10-09-2026
Open JSON

Vulnerability summary

GHSA-4XX7-2CX3-X473 is a medium (CVSS 5.3) vulnerability in keycloak-saml-core Maven.

Overall risk
21/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v4.0 (OSV · Maven), selected by version preference
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
CGA-CWGV-C26G-FRM6CGA-M2FR-Q5P6-C4VGCGA-JF8Q-RHM9-C524

Timeline

  1. 19-09-2024
    PublishedVulnerability first disclosed.
  2. 10-09-2026
    Last modifiedVulnerability information updated.

Description

Duplicate Advisory: Keycloak SAML signature validation flaw # Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xgfv-xpx8-qhcr. This link is maintained to preserve external references. # Original Description A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Org.keycloak1 product
  • keycloak-saml-core< 25.0.6

1 vendor · 1 product

References

17 links
Show all 17 references