org.keycloak:keycloak-quarkus-server-app (>=13.0.0 <=13.0.1), org.keycloak:keycloak-quarkus-server-deployment (>=13.0.0 <=13.0.1) potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=13.0.0 <=13.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version =13.0.0, =13.0.0, =13.0.0, =13.0.1 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

org.keycloak:keycloak-guides (>=23.0.0 <=23.0.7), org.keycloak:keycloak-guides-maven-plugin (>=23.0.0 <=23.0.7) +3 more potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=23.0.0 <=23.0.7)

org.keycloak:keycloak-quarkus-server MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.7 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

org.keycloak:keycloak-guides (>=17.0.0 <=17.0.1), org.keycloak:keycloak-guides-maven-plugin (>=17.0.0 <=17.0.1) +3 more potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=17.0.0 <=17.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version =17.0.0, =17.0.0, =17.0.0, =17.0.0, =17.0.0, =17.0.0, =17.0.1 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

org.keycloak:keycloak-quarkus-server-app (>=12.0.0 <=12.0.4), org.keycloak:keycloak-quarkus-server-deployment (>=12.0.0 <=12.0.4) potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=12.0.0 <=12.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version =12.0.0, =12.0.0, =12.0.0, =12.0.4 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0 <=4.0.5-25.0), org.keycloak:keycloak-guides (>=25.0.0 <=25.0.6) +4 more potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=25.0.0 <=25.0.6)

org.keycloak:keycloak-quarkus-server MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.6 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

org.keycloak:keycloak-guides (>=20.0.0 <=20.0.5), org.keycloak:keycloak-guides-maven-plugin (>=20.0.0 <=20.0.5) +3 more potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=20.0.0 <=20.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =20.0.0, =20.0.0, =20.0.0, =20.0.0, =20.0.0, =20.0.0, =20.0.5 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

org.keycloak:keycloak-guides (>=16.0.0 <=16.1.1), org.keycloak:keycloak-guides-maven-plugin (>=16.0.0 <=16.1.1) +3 more potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=16.0.0 <=16.1.1)

org.keycloak:keycloak-quarkus-server MAVEN version =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.1.1 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

org.keycloak:keycloak-guides (>=22.0.0 <=22.0.5), org.keycloak:keycloak-guides-maven-plugin (>=22.0.0 <=22.0.5) +3 more potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=22.0.0 <=22.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =22.0.0, =22.0.0, =22.0.0, =22.0.0, =22.0.0, =22.0.0, =22.0.5 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0 <=2.7.4-24.0), io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0 <=1.0.0) +6 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (>=12.0.0 <=24.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =12.0.0, =2.5.6-24.0, =0.1.0, =15.1.0, =15.1.0, =21.1.0, =15.1.0, =12.0.0, =12.0.0, =24.0.5 Source cves: CVE-2024-10451 Source advisory: OSV:GHSA-V7GV-XPGF-6395...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0 <=4.0.5-25.0), org.keycloak:keycloak-guides (>=25.0.0 <=26.0.5) +6 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (>=25.0.0 <=26.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =26.0.0, =25.0.0, =25.0.0, =26.0.0, =26.0.5 Source cves: CVE-2024-10451 Source advisory: OSV:GHSA-V7GV-XPGF-6395...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0 <=4.0.5-25.0), org.keycloak:keycloak-guides (>=25.0.0 <=26.0.5) +6 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (>=25.0.0 <=26.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =26.0.0, =25.0.0, =25.0.0, =26.0.0, =26.0.5 Source cves: CVE-2024-10492 Source advisory: OSV:GHSA-5545-R4HG-RJ4M...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0 <=4.0.5-25.0), io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0 <=1.0.0) +8 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (>=12.0.0 <=26.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =12.0.0, =2.5.6-24.0, =0.1.0, =15.1.0, =15.1.0, =21.1.0, =26.0.0, =15.1.0, =12.0.0, =12.0.0, =26.0.0, =26.0.5 Source cves: CVE-2024-10492 Source advisory: OSV:GHSA-5545-R4HG-RJ4M...

keycloak-quarkus-server: Keycloak path trasversal

A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider...

io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0 <=1.0.0), net.optionfactory.keycloak:optionfactory-keycloak-cie (>=2.1 <=2.16) +45 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (>=1.2.0.CR1 <=22.0.1)

org.keycloak:keycloak-saml-core MAVEN version =1.2.0.CR1, =0.1.0, =2.1, =2.1, =1.2.0.CR1, =1.2.0.CR1, =20.0.0, =20.0.0, =21.1.0, =20.0.0, =20.0.0, =20.0.0, =20.0.0, =1.9.2.Final, =1.6.0.Final, =21.1.0, =22.0.1 and more Source cves: CVE-2024-8698 Source advisory: OSV:GHSA-XGFV-XPX8-QHCR...