40 matches found
EUVD-2018-0674
Malware in sbrugna...
EUVD-2022-2233
Malicious code in bioql PyPI...
EUVD-2022-1888
Malicious code in bioql PyPI...
EUVD-2022-4848
Malicious code in bioql PyPI...
EUVD-2022-2646
Malicious code in bioql PyPI...
GHSA-5R7W-PJX8-99QG JBoss KeyCloak Open Redirect
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL...
JBoss KeyCloak Open Redirect
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL...
GHSA-PX42-MR8M-CPGH JBoss KeyCloak Cross-site Scripting Vulnerability
If a JBoss Keycloak application was configured to use as a permitted web origin in the Keycloak administrative console, crafted requests to the login-status-iframe.html endpoint could inject arbitrary Javascript into the generated HTML code via the "origin" query parameter, leading to a cross-sit...
JBoss KeyCloak Cross-site Scripting Vulnerability
If a JBoss Keycloak application was configured to use as a permitted web origin in the Keycloak administrative console, crafted requests to the login-status-iframe.html endpoint could inject arbitrary Javascript into the generated HTML code via the "origin" query parameter, leading to a cross-sit...
GHSA-XR6Q-QQX7-553G JBoss Keycloak CSRF Vulnerability
The org.keycloak.services.resources.SocialResource.callback method in JBoss KeyCloak before 1.0.3.Final allows remote attackers to conduct cross-site request forgery CSRF attacks by leveraging lack of CSRF protection...
CVE-2014-3652
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL...
Open redirect
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL...
CVE-2014-3652
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL...
CVE-2014-3652: URL Redirection to Untrusted Site
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL...
PT-2019-7100
Name of the Vulnerable Software and Affected Versions JBoss KeyCloak affected versions not specified Description The issue is related to an open redirect vulnerability. This occurs due to the failure to validate the redirect URL properly. Recommendations At the moment, there is no information abo...
CVE-2014-3656
JBoss KeyCloak: XSS in login-status-iframe.html...
Design/Logic Flaw
JBoss KeyCloak: XSS in login-status-iframe.html...
CVE-2014-3656
JBoss KeyCloak: XSS in login-status-iframe.html...