CVE-2023-33293

An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on .localhost with subdomains for each installed applications, e.g., myapp.localhost. An attacker can make fetch requests to api-deamon to determine if a given app is installed and read th...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.8.3-20.0.5, <=0.10.0-20.0.5), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.8.3-20.0.5, <=0.10.0-20.0.5) +14 more potentially affected by CVE-2025-3910 via org.keycloak:keycloak-services (20.0.5)

org.keycloak:keycloak-services MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =0.8.3-20.0.5, =0.8.3-20.0.5, =0.10.0-20.0.5 -...

org.keycloak:keycloak-dependencies-server-all (22.0.2), org.keycloak:keycloak-guides (22.0.2) +6 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (22.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 22.0.2 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (20.0.0), org.keycloak:keycloak-guides (20.0.0) +6 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (20.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.0 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (20.0.5), org.keycloak:keycloak-guides (20.0.5) +6 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (20.0.5)

org.keycloak:keycloak-ldap-federation MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.5 - org.keycloak:keycloak-guides...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.12, <=1.3.14), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.12, <=1.3.14) +16 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (15.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.12, =1.3.12, =1.3.12, =1.3.12...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.5-25.0), org.keycloak:keycloak-guides (>=25.0.0, <=26.0.5) +6 more potentially affected by CVE-2024-10973 via org.keycloak:keycloak-quarkus-server (>=25.0.0, <=26.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =26.0.0, =25.0.0, =25.0.0, =26.0.0, =26.0.5 Source cves: CVE-2024-10973 Source advisory: GHSA-G6QQ-C9F9-2772...

org.keycloak:keycloak-guides (15.1.0), org.keycloak:keycloak-guides-maven-plugin (15.1.0) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (15.1.0)

org.keycloak:keycloak-quarkus-server MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 15.1.0 - org.keycloak:keycloak-guides-maven-plugin 15.1.0...

org.keycloak:keycloak-quarkus-server-app (15.0.2), org.keycloak:keycloak-quarkus-server-deployment (15.0.2) potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (15.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.2 -...

org.keycloak:keycloak-guides (20.0.1), org.keycloak:keycloak-guides-maven-plugin (20.0.1) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (20.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.1 - org.keycloak:keycloak-guides-maven-plugin 20.0.1...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-guides (21.1.0) +4 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (21.1.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-guides 21.1.0 ...

org.keycloak:keycloak-guides (23.0.2), org.keycloak:keycloak-guides-maven-plugin (23.0.2) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (23.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.2 - org.keycloak:keycloak-guides-maven-plugin 23.0.2...

org.keycloak:keycloak-guides (17.0.1), org.keycloak:keycloak-guides-maven-plugin (17.0.1) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (17.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 17.0.1 - org.keycloak:keycloak-guides-maven-plugin 17.0.1...

org.keycloak:keycloak-guides (23.0.0), org.keycloak:keycloak-guides-maven-plugin (23.0.0) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (23.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.0 - org.keycloak:keycloak-guides-maven-plugin 23.0.0...

org.keycloak:keycloak-guides (22.0.4), org.keycloak:keycloak-guides-maven-plugin (22.0.4) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (22.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.4 - org.keycloak:keycloak-guides-maven-plugin 22.0.4...

org.keycloak:keycloak-guides (21.0.2), org.keycloak:keycloak-guides-maven-plugin (21.0.2) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (21.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 21.0.2 - org.keycloak:keycloak-guides-maven-plugin 21.0.2...

org.keycloak:keycloak-guides (19.0.0), org.keycloak:keycloak-guides-maven-plugin (19.0.0) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (19.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.0 - org.keycloak:keycloak-guides-maven-plugin 19.0.0...

org.keycloak:keycloak-guides (20.0.2), org.keycloak:keycloak-guides-maven-plugin (20.0.2) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (20.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.2 - org.keycloak:keycloak-guides-maven-plugin 20.0.2...

org.keycloak:keycloak-guides (20.0.0), org.keycloak:keycloak-guides-maven-plugin (20.0.0) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (20.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.0 - org.keycloak:keycloak-guides-maven-plugin 20.0.0...

org.keycloak:keycloak-guides (20.0.5), org.keycloak:keycloak-guides-maven-plugin (20.0.5) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (20.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.5 - org.keycloak:keycloak-guides-maven-plugin 20.0.5...