org.keycloak:keycloak-api-docs-dist (12.0.2), org.keycloak:keycloak-dependencies-server-all (12.0.2) +29 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (12.0.2)

org.keycloak:keycloak-saml-core MAVEN version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 12.0.2 - org.keycloak:keycloak-dependencies-server-all 12.0....

org.keycloak:keycloak-api-docs-dist (18.0.1), org.keycloak:keycloak-dependencies-server-all (18.0.1) +27 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (18.0.1)

org.keycloak:keycloak-saml-core MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 18.0.1 - org.keycloak:keycloak-dependencies-server-all 18.0....

org.keycloak:keycloak-api-docs-dist (15.0.1), org.keycloak:keycloak-dependencies-server-all (15.0.1) +30 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (15.0.1)

org.keycloak:keycloak-saml-core MAVEN version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 15.0.1 - org.keycloak:keycloak-dependencies-server-all 15.0....

org.keycloak:keycloak-dependencies-server-all (11.0.1), org.keycloak:keycloak-saml-adapter-api-public (11.0.1) +24 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (11.0.1)

org.keycloak:keycloak-saml-core MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.1 -...

org.keycloak:keycloak-broker-saml (1.6.0.final), org.keycloak:keycloak-dependencies-server-all (1.6.0.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.6.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.6.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-api-docs-dist (18.0.2), org.keycloak:keycloak-dependencies-server-all (18.0.2) +27 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (18.0.2)

org.keycloak:keycloak-saml-core MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 18.0.2 - org.keycloak:keycloak-dependencies-server-all 18.0....

org.keycloak:keycloak-broker-saml (1.8.0.cr3), org.keycloak:keycloak-dependencies-server-all (1.8.0.cr3) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.8.0.cr3)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.cr3 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-dependencies-server-all (8.0.0), org.keycloak:keycloak-saml-adapter-api-public (8.0.0) +24 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (8.0.0)

org.keycloak:keycloak-saml-core MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.0 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-broker-saml (1.7.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.7.0.cr1) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.7.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.7.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-api-docs-dist (15.0.2), org.keycloak:keycloak-dependencies-server-all (15.0.2) +30 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (15.0.2)

org.keycloak:keycloak-saml-core MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 15.0.2 - org.keycloak:keycloak-dependencies-server-all 15.0....

org.keycloak:keycloak-dependencies-server-all (1.9.0.cr1), org.keycloak:keycloak-saml-adapter-core (1.9.0.cr1) +18 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.9.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.cr1 -...

net.optionfactory.keycloak:optionfactory-keycloak-cie (>=2.5, <=2.13), net.optionfactory.keycloak:optionfactory-keycloak-spid (>=2.5, <=2.13) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (21.0.2)

org.keycloak:keycloak-saml-core MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-cie =2.5, =2.5, =2.13 -...

org.keycloak:keycloak-dependencies-server-all (20.0.2), org.keycloak:keycloak-guides (20.0.2) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (20.0.2)

org.keycloak:keycloak-saml-core MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.2 - org.keycloak:keycloak-guides 20.0.2 -...

GHSA-XGFV-XPX8-QHCR Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...

org.keycloak:keycloak-dependencies-server-all (2.3.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (2.3.0.cr1) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.3.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.3.0.cr1 -...

org.keycloak:keycloak-api-docs-dist (12.0.3), org.keycloak:keycloak-dependencies-server-all (12.0.3) +29 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (12.0.3)

org.keycloak:keycloak-saml-core MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 12.0.3 - org.keycloak:keycloak-dependencies-server-all 12.0....

org.keycloak:keycloak-dependencies-server-all (8.0.2), org.keycloak:keycloak-saml-adapter-api-public (8.0.2) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (8.0.2)

org.keycloak:keycloak-saml-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.2 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-api-docs-dist (17.0.1), org.keycloak:keycloak-dependencies-server-all (17.0.1) +27 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (17.0.1)

org.keycloak:keycloak-saml-core MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 17.0.1 - org.keycloak:keycloak-dependencies-server-all 17.0....

org.keycloak:keycloak-dependencies-server-all (3.1.0.final), org.keycloak:keycloak-saml-adapter-api-public (3.1.0.final) +24 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.1.0.final)

org.keycloak:keycloak-saml-core MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.1.0.final -...

org.keycloak:keycloak-saml-adapter-api-public (4.7.0.final), org.keycloak:keycloak-saml-adapter-core (4.7.0.final) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (4.7.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.7.0.final -...