org.keycloak:keycloak-guides (22.0.5), org.keycloak:keycloak-guides-maven-plugin (22.0.5) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (22.0.5)

org.keycloak:keycloak-account-ui MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-guides 22.0.5 - org.keycloak:keycloak-guides-maven-plugin 22.0.5 -...

Keycloak error_description injection on error pages that can trigger phishing attacks

Keycloak’s account console accepts arbitrary text in the errordescription query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages e.g., fake support phone numbers or...

org.keycloak:keycloak-dependencies-server-all (25.0.3), org.keycloak:keycloak-dependencies-server-min (25.0.3) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.3)

org.keycloak:keycloak-admin-ui MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.3 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-server-all (23.0.5), org.keycloak:keycloak-dependencies-server-min (23.0.5) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (23.0.5)

org.keycloak:keycloak-admin-ui MAVEN version 23.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.5 - org.keycloak:keycloak-dependencies-server-m...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.3) +23 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (>=26.3.0, <=26.3.3)

org.keycloak:keycloak-admin-ui MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-10044https://vulners.com/c...

org.keycloak:keycloak-guides (22.0.3), org.keycloak:keycloak-guides-maven-plugin (22.0.3) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (22.0.3)

org.keycloak:keycloak-account-ui MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-guides 22.0.3 - org.keycloak:keycloak-guides-maven-plugin 22.0.3 -...

org.keycloak:keycloak-api-docs-dist (16.0.0), org.keycloak:keycloak-dependencies-server-all (16.0.0) +2 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (16.0.0)

org.keycloak:keycloak-admin-ui MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-api-docs-dist 16.0.0 - org.keycloak:keycloak-dependencies-server-all 16.0.0 ...

org.keycloak:keycloak-dependencies-server-all (24.0.3), org.keycloak:keycloak-dependencies-server-min (24.0.3) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.3)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.3 - org.keycloak:keycloak-dependencies-server-m...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +9 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.5)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 -...

org.keycloak:keycloak-dependencies-server-all (23.0.6), org.keycloak:keycloak-dependencies-server-min (23.0.6) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (23.0.6)

org.keycloak:keycloak-account-ui MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.6 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.3), org.keycloak:keycloak-quarkus-integration-tests (20.0.3) +3 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (20.0.3)

org.keycloak:keycloak-admin-ui MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.3 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.1) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.1)

org.keycloak:keycloak-account-ui MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =3.0.1-25.0, =4.0.1-25.0 -...

org.keycloak:keycloak-dependencies-server-all (25.0.2), org.keycloak:keycloak-dependencies-server-min (25.0.2) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.2)

org.keycloak:keycloak-admin-ui MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.2 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-server-all (25.0.0), org.keycloak:keycloak-dependencies-server-min (25.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.0)

org.keycloak:keycloak-account-ui MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.0 -...

GHSA-27GC-WJ6X-9W55 Keycloak error_description injection on error pages that can trigger phishing attacks

Keycloak’s account console accepts arbitrary text in the errordescription query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages e.g., fake support phone numbers or...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.0.3-25.0, <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.6) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.6)

org.keycloak:keycloak-account-ui MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =4.0.3-25.0, =4.0.5-25.0 -...

org.keycloak:keycloak-dependencies-server-all (23.0.3), org.keycloak:keycloak-dependencies-server-min (23.0.3) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (23.0.3)

org.keycloak:keycloak-account-ui MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.3 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.4) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.4)

org.keycloak:keycloak-admin-ui MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 4.0.2-25.0 -...

org.keycloak:keycloak-dependencies-server-all (25.0.3), org.keycloak:keycloak-dependencies-server-min (25.0.3) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.3)

org.keycloak:keycloak-account-ui MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.3 -...

org.keycloak:keycloak-dependencies-server-all (24.0.0), org.keycloak:keycloak-dependencies-server-min (24.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.0)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.0 - org.keycloak:keycloak-dependencies-server-m...