Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2022/09/01 12:00 a.m.•11 views

PT-2022-15528 · Red Hat · Keycloak +1

Name of the Vulnerable Software and Affected Versions: Red Hat Single Sign-On 7 Keycloak versions prior to 18.0.1 Description: A Stored Cross-site scripting XSS vulnerability was found in Keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious...

5.4CVSS4.1AI score0.00681EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/01 12:00 a.m.•4 views

CVE-2022-2256: Improper Neutralization of Input During Web Page Generation

A Stored Cross-site scripting XSS vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality...

3.8CVSS5.7AI score0.00681EPSS
SaveExploits0References3
OSV
OSV
•added 2021/02/11 6:15 p.m.•32 views

CVE-2020-10734

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable...

3.3CVSS6.7AI score
SaveExploits0References2
NVD
NVD
•added 2021/02/11 6:15 p.m.•51 views

CVE-2020-10734

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable...

3.3CVSS0.00211EPSS
SaveExploits0References2
CVE
CVE
•added 2021/02/11 3:29 p.m.•138 views

CVE-2020-10734

Keycloak is affected by CVE-2020-10734 due to missing CSRF protection on the OIDC logout endpoint. The vulnerability is described across multiple sources as affecting Keycloak implementations used with Red Hat Fuse 7, Red Hat SSO 7, and Red Hat OpenShift Application Runtimes, with the OIDC logout...

3.3CVSS3.9AI score0.00211EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/02/11 3:29 p.m.•59 views

CVE-2020-10734

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable...

3.8AI score0.00211EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/11 12:00 a.m.•3 views

CVE-2020-10734: Cross-Site Request Forgery (CSRF)

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable...

3.3CVSS5.7AI score0.00211EPSS
SaveExploits0References2
Rows per page
Query Builder