pocKeycloakCVE-2023-0264

PoC CVE-2023-0264 — frontend OIDC session hijacking Static frontend that runs the OIDC flow authorization code against a Keycloak and exposes the sessionid hijacking hook of the PoC. It is served with nginx on port 5174 for team use. Launching it on the VPS root@kitploit: cd vps/pocCVE0264 docker...

CVE-2023-0264

CVE-2023-0264 concerns an improper authentication flaw in Keycloak’s OpenID Connect user authentication, potentially allowing impersonation and new session token generation. The connected documents include a GitHub PoC (Exploit for Improper Authentication in Redhat Keycloak) describing a session ...

CVE-2023-0264

creationtimestamp| type| source ---|---|--- 2023-03-06 17:27:57+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3880 2023-04-28 07:09:17+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/309 2023-04-28 11:01:16+00:00| published-proof-of-concept|...

Exploit for Improper Authentication in Redhat Keycloak

PoC for CVE-2023-0264 Keycloak vulnerability that allows ses...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

New Red Hat Single Sign-On 7.6.2 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...