CVE-2023-6841 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2023-6841

creationtimestamp| type| source ---|---|--- 2025-03-15 04:45:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7667...

Keycloak < 24.0.0 DoS (CVE-2023-6841)

A denial of service vulnerability was found in Keycloak 24.0.0 where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values. Note that Nessus has not tested f...

de.adorsys.sts:keycloak-storage-provider (>=1.1.23, <=1.1.28), io.phasetwo.keycloak:keycloak-events (0.20) +76 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (22.0.4)

org.keycloak:keycloak-core MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.1.23, =0.20, =0.12, =8.16.0, =8.16.0, =8.17.1 -...

org.jboss.aerogear.unifiedpush:unifiedpush-service (1.2.3.final), org.keycloak:keycloak-adapter-core (3.4.2.final) +57 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (3.4.2.final)

org.keycloak:keycloak-core MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-service 1.2.3.final - org.keycloak:keycloak-adapter-core...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +141 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (14.0.0)

org.keycloak:keycloak-core MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

io.github.johnjcool:keycloak-cas-services (4.4.0.final), io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak (1.1.0) +65 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (4.4.0.final)

org.keycloak:keycloak-core MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...

com.boozallen.aissemble:aissemble-pipeline-invocation (>=1.7.0-rc2, <=1.7.0), com.boozallen.aissemble:aissemble-policy-decision-point (>=1.7.0-rc2, <=1.7.0) +191 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (17.0.1)

org.keycloak:keycloak-core MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.boozallen.aissemble:aissemble-pipeline-invocation =1.7.0-rc2, =1.7.0-rc2, =1.7.0-rc2, =1.7.0-rc2,...

org.keycloak:keycloak-adapter-core (2.4.0.cr1), org.keycloak:keycloak-admin-client (2.4.0.cr1) +52 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (2.4.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.4.0.cr1 - org.keycloak:keycloak-admin-client 2.4.0.cr1 -...

be.atbash.ee.security:octopus-keycloak (>=0.4, <=0.6), be.atbash.ee.security:octopus-keycloak-rest (>=0.4, <=0.6) +61 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (2.0.0.final)

org.keycloak:keycloak-core MAVEN version 2.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - be.atbash.ee.security:octopus-keycloak =0.4, =0.4, =0.4, =0.4, =1.2.8.final, =1.2.8.final,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +118 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (12.0.3)

org.keycloak:keycloak-core MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 - com.github.vzakharchenko:cisco-radius-plugin 1.3...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +88 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (12.0.0)

org.keycloak:keycloak-core MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9,...

io.apiman:apiman-distro-wildfly8 (>=1.0.0.beta2, <=1.0.0.final), io.apiman:apiman-manager-ui-war-wildfly8 (>=1.0.0.beta2, <=1.0.2.final) +71 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (1.1.0.beta2)

org.keycloak:keycloak-core MAVEN version 1.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman:apiman-distro-wildfly8 =1.0.0.beta2, =1.0.0.beta2, =1.0.0.beta2, =2.0.16, =2.0.20, =2.2.28 ...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +97 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (10.0.1)

org.keycloak:keycloak-core MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugin 1.2.4 -...

be.jidoka:jdk-keycloak-admin (>=1.0.0, <=1.1.0), com.backpackcloud:keycloak-http-forwarder (0.1.0) +97 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (9.0.3)

org.keycloak:keycloak-core MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - be.jidoka:jdk-keycloak-admin =1.0.0, =3.1.0, =3.1.0, =1.2.0.final, =1.1.0.rc1, =1.3.3.final, =1.3.4.final a...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +70 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (9.0.2)

org.keycloak:keycloak-core MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin 1.2.2 -...

org.keycloak:keycloak-adapter-core (8.0.0), org.keycloak:keycloak-admin-client (8.0.0) +57 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (8.0.0)

org.keycloak:keycloak-core MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 8.0.0 - org.keycloak:keycloak-admin-client 8.0.0 -...

org.keycloak:keycloak-adapter-core (2.5.1.final), org.keycloak:keycloak-admin-client (2.5.1.final) +52 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (2.5.1.final)

org.keycloak:keycloak-core MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.1.final - org.keycloak:keycloak-admin-client 2.5.1.final -...

org.keycloak:keycloak-adapter-core (1.9.0.cr1), org.keycloak:keycloak-admin-client (1.9.0.cr1) +42 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (1.9.0.cr1)

org.keycloak:keycloak-core MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 1.9.0.cr1 - org.keycloak:keycloak-admin-client 1.9.0.cr1 -...

com.conexice:openportal-identity-deployment (>=1.0.0-alpha.0, <=1.2.0), com.conexice:openportal-manager-deployment (>=1.0.0, <=1.2.0) +88 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (23.0.6)

org.keycloak:keycloak-core MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.conexice:openportal-identity-deployment =1.0.0-alpha.0, =1.0.0, =0.1.2, =2.0.13, =2.0.13, =2.0.13,...