io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-dependencies-server-all (21.1.0) +7 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (21.1.0)

org.keycloak:keycloak-ldap-federation MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +17 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (14.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +15 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (12.0.3)

org.keycloak:keycloak-ldap-federation MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 -...

org.keycloak:keycloak-dependencies-server-all (2.3.0.cr1) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (2.3.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.3.0.cr1 Source cves: CVE-2025-134...

org.keycloak:keycloak-dependencies-server-all (21.1.2), org.keycloak:keycloak-guides (21.1.2) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (21.1.2)

org.keycloak:keycloak-ldap-federation MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 21.1.2 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (1.6.0.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (1.6.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.6.0.final Source cves:...

org.keycloak:keycloak-services (3.4.2.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (3.4.2.final)

org.keycloak:keycloak-ldap-federation MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-services 3.4.2.final Source cves: CVE-2025-13467 Source...

org.keycloak:keycloak-dependencies-server-all (3.2.0.final), org.keycloak:keycloak-server-feature-pack (3.2.0.final) +2 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (3.2.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.0.final -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=2.7.4-24.0), org.keycloak:keycloak-dependencies-server-all (24.0.2) +7 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (24.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =2.5.6-24.0, =2.7.4-24.0 -...

org.keycloak:keycloak-dependencies-server-all (11.0.0), org.keycloak:keycloak-server-feature-pack (11.0.0) +2 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (11.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.0 -...

io.phasetwo.keycloak:keycloak-orgs (>=0.40, <=0.42), org.keycloak:keycloak-dependencies-server-all (22.0.1) +7 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (22.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.40, =0.42 -...

org.keycloak:keycloak-dependencies-server-all (8.0.0), org.keycloak:keycloak-server-feature-pack (8.0.0) +2 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (8.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.0 -...

org.keycloak:keycloak-dependencies-server-all (3.4.0.final), org.keycloak:keycloak-server-feature-pack (3.4.0.final) +2 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (3.4.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.0.final -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.0, <=1.4.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.4.0, <=1.4.2) +16 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (17.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.4.0, =1.4.0, =1.4.0, =1.4.0,...

CVE-2023-53958 LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account...

CVE-2023-53958 LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account...

PT-2025-52528

Name of the Vulnerable Software and Affected Versions LDAP Tool Box Self Service Password version 1.5.2 Description The software contains a password reset issue where attackers can manipulate HTTP Host headers during token generation. This allows crafting malicious password reset requests that...

CVE-2023-53958: Weak Password Recovery Mechanism for Forgotten Password

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account...

Security update 5.1.1.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: Security issues fixed: CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client version 11.5.10 bsc1254113 CVE-2025-47911: Fix parsing HTML documents version 11.5.10 bsc12514...

SUSE-SU-2025:4444-1 Security update 5.1.1.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: - Security issues fixed: CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client version 11.5.10 bsc1254113 CVE-2025-47911: Fixed parsing HTML documents version 11.5.10...