keycloak__keycloak_CVE-2022-4361_21-1-1

Keycloak Keycloak — это решение с открытым исходным кодом для управления идентификацией и доступом IAM для современных приложений и сервисов. Этот репозиторий содержит исходный код сервера Keycloak, адаптеров Java и адаптера JavaScript. Помощь и документация Документация Список рассылки...

CVE-2022-4361

CVE-2022-4361 Описание Этот репозиторий содержит PoC для CVE-2022-4361. Вся заслуга принадлежит первоначальному автору открытия, mulliken; ВАЖНО : этот PoC не является полным, так как не охватывает случай значения AssertionConsumerServiceURL в протоколе аутентификации SAML. В настоящее время...

CVE-2022-4361

Keycloak, an open-source identity and access management solution, has a cross-site scripting XSS vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirecturi...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.4 security update

A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.4 for OpenShift image security enhancement update

A new image is available for Red Hat Single Sign-On 7.6.4, running on OpenShift Container Platform 3.10 and 3.11, and 4.12.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 9 : Red Hat Single Sign-On 7.6.4 security update on RHEL 9 (Important) (RHSA-2023:3885)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3885 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...