CVE-2023-6841 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2023-6841

creationtimestamp| type| source ---|---|--- 2025-03-15 04:45:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7667...

Keycloak < 24.0.0 DoS (CVE-2023-6841)

A denial of service vulnerability was found in Keycloak 24.0.0 where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values. Note that Nessus has not tested f...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +86 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (15.1.0)

org.keycloak:keycloak-core MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 - com.github.vzakharchenko:cisco-radius-plugin...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (>=0.5.3, <=0.5.4), com.github.vzakharchenko:chillispot-radius-plugin (1.3.19) +96 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (16.1.1)

org.keycloak:keycloak-core MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak =0.5.3, =6.2.0, =6.2.0, =6.2.0, =6.0.0, =6.0.0, =6.4.0 and more...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), de.retest:recheck (>=1.2.0-beta.1, <=1.4.0) +83 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (6.0.1)

org.keycloak:keycloak-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =1.2.0-beta.1, =1.3.0-beta.1, =0.0.7, =0.0.7, =0.0.6,...

com.mjamsek.auth:kee-auth (1.0.0), de.retest:recheck (>=1.6.0-beta.1, <=1.7.0) +105 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (7.0.1)

org.keycloak:keycloak-core MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.mjamsek.auth:kee-auth 1.0.0 - de.retest:recheck =1.6.0-beta.1, =1.6.0-beta.1, =1.6.0-beta.1,...

it.vige:school-jsf (>=1.2.0, <=1.2.1), org.keycloak:keycloak-adapter-core (4.8.1.final) +64 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (4.8.1.final)

org.keycloak:keycloak-core MAVEN version 4.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - it.vige:school-jsf =1.2.0, =1.2.1 - org.keycloak:keycloak-adapter-core 4.8.1.final -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.1, <=1.3.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.1, <=1.3.2) +93 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (12.0.1)

org.keycloak:keycloak-core MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +118 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (12.0.3)

org.keycloak:keycloak-core MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 - com.github.vzakharchenko:cisco-radius-plugin 1.3...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +137 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (13.0.0)

org.keycloak:keycloak-core MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 - com.github.vzakharchenko:cisco-radius-plugin 1.3...

org.keycloak:keycloak-adapter-core (8.0.0), org.keycloak:keycloak-admin-client (8.0.0) +57 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (8.0.0)

org.keycloak:keycloak-core MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 8.0.0 - org.keycloak:keycloak-admin-client 8.0.0 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.8.3-20.0.5, <=0.10.0-20.0.5), fr.cnieg.keycloak:attribute-login-provider (1.3.3) +63 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (20.0.5)

org.keycloak:keycloak-core MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =0.8.3-20.0.5, =0.111, =0.111, =0.116, =0.119, =0.11...

com.ritense.valtimo:keycloak-iam (>=10.6.0.release, <=11.3.5.release), com.ritense.valtimo:valtimo-dependencies (>=10.6.0.release, <=11.3.5.release) +76 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (21.1.0)

org.keycloak:keycloak-core MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.ritense.valtimo:keycloak-iam =10.6.0.release, =10.6.0.release, =0.126, =0.126, =0.126, =0.126, =0.132,...

com.abavilla:fpi-bot-api (>=1.8.1, <=1.8.5), com.abavilla:fpi-bot-api-parent (>=1.8.1, <=1.8.5) +189 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (22.0.1)

org.keycloak:keycloak-core MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.abavilla:fpi-bot-api =1.8.1, =1.8.1, =1.8.6, =1.8.6, =1.9.0, =1.9.0, =1.10.1, =1.10.1, =1.0.29, =1.0.2...

fr.cnieg.keycloak:attribute-login-provider (1.3.7), org.keycloak:keycloak-adapter-core (22.0.2) +63 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (22.0.2)

org.keycloak:keycloak-core MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.7 - org.keycloak:keycloak-adapter-core 22.0.2 -...

de.adorsys.sts:keycloak-storage-provider (>=1.1.23, <=1.1.28), io.phasetwo.keycloak:keycloak-events (0.20) +76 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (22.0.4)

org.keycloak:keycloak-core MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.1.23, =0.20, =0.12, =8.16.0, =8.16.0, =8.17.1 -...

be.jidoka:jdk-keycloak-admin (1.3.0), com.abavilla:fpi-framework-core (>=1.1.13, <=1.1.19) +98 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (19.0.1)

org.keycloak:keycloak-core MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - be.jidoka:jdk-keycloak-admin 1.3.0 - com.abavilla:fpi-framework-core =1.1.13, =1.1.13, =5.1.1-jdk1.8,...

com.jalalkiswani:smart-cloud-service (>=5.0.0, <=5.1.0), com.jalalkiswani:smart-cloud-service-crosscutting (5.1.0) +78 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (11.0.3)

org.keycloak:keycloak-core MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.jalalkiswani:smart-cloud-service =5.0.0, =5.0.0, =5.0.0, =1.10.0.final, =1.10.0.final, =1.11.7.final a...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +88 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (12.0.0)

org.keycloak:keycloak-core MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9,...