4782 matches found
gha-lab-a815a82f03-1
CloudPirates Open Source Helm Charts A curated collection of production-ready Helm charts for open-source cloud-native applications. This repository provides secure, well-documented, and configurable Helm charts following cloud-native best practices. ⚠️ IMPORTANT : As of April 15, 2026 , all...
CVE-2026-46455
CVE-2026-46455 — camel-keycloak Missing ISACTIVE Check Expired Tokens Accepted Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...
keycloak
Open Source Identity and Access Management...
CVE-2024-8698-POC
https://huydoppa.hashnode.dev/analyst-cve-2024-8698-keycloak-with-zero-knowledge-about-keycloak...
CVE-2021-3754
CVE-2021-3754 This repository documents Vulnerability details and exploit for CVE-2021-3754 discovered and reported by myself on 21st August 2021 Metrics CWE-20: Improper Input Validation CVSS: 5.3 MEDIUM Description A flaw was found in Apache Keycloak & Redhat SSO where an attacker is able to...
Keycloak-12.0.1-CVE-2020-10770
Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi ' Blind Server-Side Request Forgery SSRF Unauthenticated Exploit-DB-50405 Expected outcome: Port scan of localhost or internally accessible hosts. Intended only for educational and testing in corporate environments. This Exploit was...
CVE-2024-3656
Keycloak 24.0.5 уязвим к нарушению контроля доступа Broken Access Control, где атакующий может использовать любого аутентифицированного пользователя для выполнения некоторых действий API, таких как: Тестирование LDAP-подключений через конечную точку testLDAPConnection. Получение неуправляемых...
KeyCloak - Information Exposure
A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients like client secret without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this...
Keycloak - SAML Core Package Signature Validation Flaw
A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...
Keycloak < 24.0.5 - Broken Access Control
A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...
Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting
Keycloak 10.0.0 to 18.0.0 contains a cross-site scripting vulnerability via the client-registrations endpoint. On a POST request, the application does not sanitize an unknown attribute name before including it in the error response with a 'Content-Type' of text/hml. Once reflected, the response i...
Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass
Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...
Keycloak - Open Redirect
A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially...
keycloak
Управление идентификацией и доступом с открытым исходным кодом Добавляйте аутентификацию в приложения и защищайте сервисы с минимальными усилиями. Вам не нужно заниматься хранением пользователей или их аутентификацией. Keycloak обеспечивает федерацию пользователей, строгую аутентификацию,...
GHSA-QXVW-FVWX-5CP7 vulnerabilities
Vulnerabilities for packages: keycloak-fips, flyway, reposilite, flyway-fips...
CVE-2026-55857 vulnerabilities
Vulnerabilities for packages: keycloak-fips, flyway, reposilite, flyway-fips...
CVE-2026-55858 vulnerabilities
Vulnerabilities for packages: keycloak-fips, flyway, reposilite, flyway-fips...
CVE-2026-55856 vulnerabilities
Vulnerabilities for packages: keycloak-fips, flyway, reposilite, flyway-fips...