HTML Injection

org.keycloak:keycloak-services is vulnerable to HTML Injection. A malicious user is able to send emails containing phishing links to users via the execute-actions-email endpoint of the admin REST API...

Path Traversal

org.keycloak:keycloak-services is vulnerable to Path Traversal. The vulnerability is due to improper redirect URL validation, which lets an attacker bypass validation for redirects and access sensitive information on the domain...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 for OpenShift image security and enhancement update

A new image is available for Red Hat Single Sign-On 7.5.1, running on OpenShift Container Platform 3.10 and 3.11, and 4.9. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

Cross-Site Scripting (XSS)

keycloak-services is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the Realm registration REST API...

Man-in-the-Middle (MtiM)

keycloak-services is vulnerable to man-in-the-middle attack. The signatures on CRL are not validated, allowing a remote attacker to perform man-in-the-middle attacks to sniff and modify network traffic...

Unauthorized Postings And Removals

keycloak-services is vulnerable to unauthorized postings and removals. Posting different credential IDs can be done by using the remove devices form, subsequently possibly to perform unauthorized removal of MFA devices of other users...

User Deletion Via Incorrect Permissions Check

keycloak-services is vulnerable to user deletion through an incorrect permissions check. A malicious user that has access to a service account can delete users in a seperate realm...

Open Redirection

JBOSS keycloak-services is vulnerable to open-redirection attacks. A lack of validation in the redirect URL in org.keycloak.protocol.oidc.utils.RedirectUtils allows a remote attacker to redirect user's to a malicious URL and confidential information from victims via phishing attacks...

Cross-site Request Forgery

keycloak-services is vulnerable to cross-site request forgery CSRF attacks. The earlier versions of keycloak-services did not include CSRF protection mechanisms, thus allowing attackers with valid session cookies to perform CSRF attacks...