EUVD-2025-27029

Keycloak errordescription injection on error pages that can trigger phishing attacks...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-dependencies-server-min (25.0.5) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.5)

org.keycloak:keycloak-account-ui MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 -...

org.keycloak:keycloak-guides (22.0.5), org.keycloak:keycloak-guides-maven-plugin (22.0.5) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (22.0.5)

org.keycloak:keycloak-account-ui MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-guides 22.0.5 - org.keycloak:keycloak-guides-maven-plugin 22.0.5 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (19.0.2), org.keycloak:keycloak-quarkus-integration-tests (19.0.2) +5 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (19.0.2)

org.keycloak:keycloak-admin-ui MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 19.0.2 -...

org.keycloak:keycloak-guides (21.1.1), org.keycloak:keycloak-guides-maven-plugin (21.1.1) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (21.1.1)

org.keycloak:keycloak-admin-ui MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-guides 21.1.1 - org.keycloak:keycloak-guides-maven-plugin 21.1.1 -...

org.keycloak:keycloak-server (1.0-alpha-1-12062013) potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (1.0-alpha-1-12062013)

org.keycloak:keycloak-admin-ui MAVEN version 1.0-alpha-1-12062013 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-server 1.0-alpha-1-12062013 Source cves: CVE-2025-10044 Source...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.3) +23 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (>=26.3.0, <=26.3.3)

org.keycloak:keycloak-account-ui MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-10044https://vulners.c...

org.keycloak:keycloak-guides (18.0.2), org.keycloak:keycloak-guides-maven-plugin (18.0.2) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (18.0.2)

org.keycloak:keycloak-admin-ui MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-guides 18.0.2 - org.keycloak:keycloak-guides-maven-plugin 18.0.2 -...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.3) +23 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (>=26.3.0, <=26.3.3)

org.keycloak:keycloak-admin-ui MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-10044https://vulners.com/c...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.0.3-25.0, <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.6) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.6)

org.keycloak:keycloak-admin-ui MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =4.0.3-25.0, =4.0.5-25.0 -...

org.keycloak:keycloak-dependencies-server-all (23.0.4), org.keycloak:keycloak-dependencies-server-min (23.0.4) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (23.0.4)

org.keycloak:keycloak-admin-ui MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.4 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (19.0.1), org.keycloak:keycloak-quarkus-integration-tests (19.0.1) +5 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (19.0.1)

org.keycloak:keycloak-admin-ui MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 19.0.1 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.4.3-26.2), org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0, <=26.2.5) +23 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (>=26.0.0, <=26.2.5)

org.keycloak:keycloak-admin-ui MAVEN version =26.0.0, =4.1.0-26.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.0.0, =26.2.5 and more Source cves: CVE-2025-1004...

org.keycloak:keycloak-guides (22.0.0), org.keycloak:keycloak-guides-maven-plugin (22.0.0) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (22.0.0)

org.keycloak:keycloak-admin-ui MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-guides 22.0.0 - org.keycloak:keycloak-guides-maven-plugin 22.0.0 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=2.7.4-24.0), org.keycloak:keycloak-dependencies-server-all (24.0.2) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.2)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =2.5.6-24.0, =2.7.4-24.0 -...

org.keycloak:keycloak-dependencies-server-all (23.0.2), org.keycloak:keycloak-dependencies-server-min (23.0.2) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (23.0.2)

org.keycloak:keycloak-account-ui MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.2 -...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-dependencies-server-min (25.0.5) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.5)

org.keycloak:keycloak-admin-ui MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.5), org.keycloak:keycloak-quarkus-integration-tests (20.0.5) +3 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (20.0.5)

org.keycloak:keycloak-admin-ui MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.5 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.4.3-26.2), org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0, <=26.2.5) +23 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (>=26.0.0, <=26.2.5)

org.keycloak:keycloak-account-ui MAVEN version =26.0.0, =4.1.0-26.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.0.0, =26.2.5 and more Source cves: CVE-2025-...

org.keycloak:keycloak-guides (21.1.2), org.keycloak:keycloak-guides-maven-plugin (21.1.2) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (21.1.2)

org.keycloak:keycloak-account-ui MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-guides 21.1.2 - org.keycloak:keycloak-guides-maven-plugin 21.1.2 -...