Lucene search

K
cvelistRedhatCVELIST:CVE-2014-3709
HistoryOct 18, 2017 - 2:00 p.m.

CVE-2014-3709

2017-10-1814:00:00
redhat
www.cve.org

8.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%

The org.keycloak.services.resources.SocialResource.callback method in JBoss KeyCloak before 1.0.3.Final allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging lack of CSRF protection.

8.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%

Related for CVELIST:CVE-2014-3709