keycloak__keycloak_CVE-2022-4361_21-1-1

Keycloak Keycloak 是一个面向现代应用和服务的开源身份与访问管理解决方案。 本仓库包含 Keycloak Server、Java 适配器和 JavaScript 适配器的源代码。 帮助与文档 文档 用户邮件列表 - 用于获取帮助和解答 Keycloak 相关一般问题的邮件列表 报告安全漏洞 如果您发现了安全漏洞，请查阅如何正确报告漏洞的说明 报告问题 如果您认为自己发现了 Keycloak 的缺陷，请提交一个 issue。请记得提供清晰的摘要、描述以及复现该问题的步骤。 快速开始 要运行 Keycloak，请从我们的网站下载发行版。解压后运行： root@kitploit...

CVE-2022-4361

CVE-2022-4361 描述 此仓库包含针对 CVE-2022-4361 的概念验证 PoC。 所有功劳归功于该漏洞的原始发现者 mulliken； 重要提示 ：此 PoC 并不完整，因为它未覆盖 SAML 认证协议中的 AssertionConsumerServiceURL 值的情况。目前仅覆盖了 OIDC 情况。 步骤 1. 克隆此仓库。 root@kitploit: git clone https://github.com/faccimatteo/CVE-2022-4361.git && cd ./CVE-2022-4361 2. 使用 Docker Compose...

CVE-2022-4361

Keycloak, an open-source identity and access management solution, has a cross-site scripting XSS vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirecturi...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.4 security update

A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.4 for OpenShift image security enhancement update

A new image is available for Red Hat Single Sign-On 7.6.4, running on OpenShift Container Platform 3.10 and 3.11, and 4.12.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 9 : Red Hat Single Sign-On 7.6.4 security update on RHEL 9 (Important) (RHSA-2023:3885)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3885 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...