Lucene search
+L

3 matches found

OSV
OSV
added 2024/04/17 1:22 p.m.10 views

CVE-2024-1249 Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origi...

7.4CVSS6.9AI score
SaveExploits0References17
RedHat Linux
RedHat Linux
added 2024/04/16 8:04 p.m.17 views

keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origi...

7.4CVSS5.7AI score0.00448EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/04/16 7:55 p.m.21 views

keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origi...

7.4CVSS5.7AI score0.00448EPSS
SaveExploits0References4
Rows per page
Query Builder