Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the OIDC component. Unauthorized attackers may gain access through the HTTP network, allowing them to access critical data or all accessible data under user interaction...

Cross-Site Request Forgery (CSRF)

org.keycloak, keycloak-services is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to inadequate validation of cross-origin messages in Keycloak's OIDC component's "checkLoginIframe," allowing attackers to exploit Cross-Site Request Forgery CSRF attacks...

CVE-2024-1249

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origi...

PT-2024-17623 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: A flaw was found in Keycloak's OIDC component in the checkLoginIframe, which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of request...