org.keycloak:keycloak-dependencies-server-all (1.9.1.final), org.keycloak:keycloak-saml-adapter-core (1.9.1.final) +18 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.9.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.1.final -...

org.keycloak:keycloak-dependencies-server-all (10.0.2), org.keycloak:keycloak-saml-adapter-api-public (10.0.2) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (10.0.2)

org.keycloak:keycloak-saml-core MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.2 -...

org.keycloak:keycloak-dependencies-server-all (19.0.0), org.keycloak:keycloak-guides (19.0.0) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (19.0.0)

org.keycloak:keycloak-saml-core MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 19.0.0 - org.keycloak:keycloak-guides 19.0.0 -...

org.keycloak:keycloak-broker-saml (1.5.1.final), org.keycloak:keycloak-dependencies-server-all (1.5.1.final) +1 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.5.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.5.1.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-saml-adapter-api-public (4.8.3.final), org.keycloak:keycloak-saml-adapter-core (4.8.3.final) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (4.8.3.final)

org.keycloak:keycloak-saml-core MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.8.3.final -...

org.keycloak:keycloak-saml-adapter-api-public (4.2.1.final), org.keycloak:keycloak-saml-adapter-core (4.2.1.final) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (4.2.1.final)

org.keycloak:keycloak-saml-core MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.2.1.final -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.final), org.keycloak:keycloak-saml-adapter-api-public (3.4.1.final) +26 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.4.1.final)

org.keycloak:keycloak-saml-core MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.final -...

org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-saml-adapter-api-public (3.2.1.final) +26 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.2.1.final)

org.keycloak:keycloak-saml-core MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...

Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...

org.keycloak:keycloak-dependencies-server-all (2.5.5.final), org.keycloak:keycloak-saml-adapter-api-public (2.5.5.final) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.5.5.final)

org.keycloak:keycloak-saml-core MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.5.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.3.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.3.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.9.3.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.3.final -...

org.keycloak:keycloak-broker-saml (1.4.0.final), org.keycloak:keycloak-dependencies-server-all (1.4.0.final) +1 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.4.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-broker-saml (1.3.0.final), org.keycloak:keycloak-dependencies-server-all (1.3.0.final) +3 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.3.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.3.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (20.0.0), org.keycloak:keycloak-guides (20.0.0) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (20.0.0)

org.keycloak:keycloak-saml-core MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.0 - org.keycloak:keycloak-guides 20.0.0 -...

org.keycloak:keycloak-saml-adapter-api-public (4.4.0.final), org.keycloak:keycloak-saml-adapter-core (4.4.0.final) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (4.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.4.0.final -...

org.keycloak:keycloak-broker-saml (1.8.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.8.0.cr1) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.8.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-saml-adapter-api-public (10.0.0) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (10.0.0)

org.keycloak:keycloak-saml-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 -...

org.keycloak:keycloak-dependencies-server-all (2.0.0.final), org.keycloak:keycloak-saml-adapter-api-public (2.0.0.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.0.0.final)

org.keycloak:keycloak-saml-core MAVEN version 2.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.0.0.final -...

org.keycloak:keycloak-broker-saml (1.3.1.final), org.keycloak:keycloak-dependencies-server-all (1.3.1.final) +1 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.3.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.3.1.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (1.9.0.final), org.keycloak:keycloak-saml-adapter-core (1.9.0.final) +18 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.9.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.final -...