CVE-2024-8698-POC

https://huydoppa.hashnode.dev/analyst-cve-2024-8698-keycloak-with-zero-knowledge-about-keycloak...

org.keycloak:keycloak-broker-saml (1.2.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.2.0.cr1) +1 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.2.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.2.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-broker-saml (1.8.0.alpha1), org.keycloak:keycloak-dependencies-server-all (1.8.0.alpha1) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.8.0.alpha1)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.alpha1 -...

org.keycloak:keycloak-broker-saml (1.8.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.8.0.cr1) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.8.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-broker-saml (1.8.0.cr2), org.keycloak:keycloak-dependencies-server-all (1.8.0.cr2) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.8.0.cr2)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.cr2 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-broker-saml (1.8.1.final), org.keycloak:keycloak-dependencies-server-all (1.8.1.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.8.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.1.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (1.9.0.final), org.keycloak:keycloak-saml-adapter-core (1.9.0.final) +18 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.9.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.3.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.3.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.9.3.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.3.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.4.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.4.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.9.4.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.4.final -...

org.keycloak:keycloak-dependencies-server-all (2.2.0.final), org.keycloak:keycloak-saml-adapter-api-public (2.2.0.final) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.2.0.final)

org.keycloak:keycloak-saml-core MAVEN version 2.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.2.0.final -...

org.keycloak:keycloak-dependencies-server-all (2.3.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (2.3.0.cr1) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.3.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.3.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (2.3.0.final), org.keycloak:keycloak-saml-adapter-api-public (2.3.0.final) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.3.0.final)

org.keycloak:keycloak-saml-core MAVEN version 2.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (2.4.0.final), org.keycloak:keycloak-saml-adapter-api-public (2.4.0.final) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.4.0.final -...

org.keycloak:keycloak-dependencies-server-all (2.5.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (2.5.0.cr1) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.5.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.0.cr1 -...

org.keycloak:keycloak-api-docs-dist (13.0.1), org.keycloak:keycloak-dependencies-server-all (13.0.1) +29 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (13.0.1)

org.keycloak:keycloak-saml-core MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 13.0.1 - org.keycloak:keycloak-dependencies-server-all 13.0....

org.keycloak:keycloak-api-docs-dist (14.0.0), org.keycloak:keycloak-dependencies-server-all (14.0.0) +31 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (14.0.0)

org.keycloak:keycloak-saml-core MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 14.0.0 - org.keycloak:keycloak-dependencies-server-all 14.0....

org.keycloak:keycloak-api-docs-dist (16.1.1), org.keycloak:keycloak-dependencies-server-all (16.1.1) +27 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (16.1.1)

org.keycloak:keycloak-saml-core MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 16.1.1 - org.keycloak:keycloak-dependencies-server-all 16.1....

org.keycloak:keycloak-api-docs-dist (17.0.1), org.keycloak:keycloak-dependencies-server-all (17.0.1) +27 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (17.0.1)

org.keycloak:keycloak-saml-core MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 17.0.1 - org.keycloak:keycloak-dependencies-server-all 17.0....

org.keycloak:keycloak-api-docs-dist (18.0.2), org.keycloak:keycloak-dependencies-server-all (18.0.2) +27 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (18.0.2)

org.keycloak:keycloak-saml-core MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 18.0.2 - org.keycloak:keycloak-dependencies-server-all 18.0....

org.keycloak:keycloak-dependencies-server-all (19.0.1), org.keycloak:keycloak-guides (19.0.1) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (19.0.1)

org.keycloak:keycloak-saml-core MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 19.0.1 - org.keycloak:keycloak-guides 19.0.1 -...