CVE-2014-3655

creationtimestamp| type| source ---|---|--- 2024-02-13 14:02:27+00:00| seen| https://t.me/ctinow/183823...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=0.11.0, <=1.0.1), org.keycloak:keycloak-account-freemarker (>=1.0-alpha-2, <=1.0.1.final) +6 more potentially affected by CVE-2014-3655 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=1.0.1.final)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.11.0, =1.0-alpha-2, =1.0-beta-4, =1.0-beta-4, =1.0-alpha-1, =1.0-alpha-2, =1.0-alpha-2, =1.0-alpha-1-12062013, =1.0.1.final Source cves: CVE-2014-3655 Source advisory: OSV:GHSA-237Q-6HJP-PCHQ...

CVE-2014-3655

CVE-2014-3655 affects JBoss KeyCloak; vulnerability is soft token deletion via CSRF. Notable details from connected docs indicate exposure in affected Keycloak releases and a fix later stated as Keycloak 1.0.2.Final. Practical impact is limited to CSRF-enabled token deletion without broader acces...