4853 matches found
GHSA-93WW-43RR-79V3 Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination
A vulnerability was found in Keycloak. Deployments of Keycloak with a reverse proxy not using pass-through termination of TLS, with mTLS enabled, are affected. This issue may allow an attacker on the local network to authenticate as any user or client that leverages mTLS as the authentication...
GHSA-93WW-43RR-79V3 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, keycloak...
Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination
A vulnerability was found in Keycloak. Deployments of Keycloak with a reverse proxy not using pass-through termination of TLS, with mTLS enabled, are affected. This issue may allow an attacker on the local network to authenticate as any user or client that leverages mTLS as the authentication...
GHSA-93WW-43RR-79V3 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, keycloak...
Keycloak proxy header handling Denial-of-Service (DoS) vulnerability
Keycloak versions 26 and earlier are vulnerable to a denial-of-service DoS attack through improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifiers, without proper validation. This can lead to cost...
GHSA-JGWC-JH89-RPGQ vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-JGWC-JH89-RPGQ Keycloak proxy header handling Denial-of-Service (DoS) vulnerability
Keycloak versions 26 and earlier are vulnerable to a denial-of-service DoS attack through improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifiers, without proper validation. This can lead to cost...
GHSA-JGWC-JH89-RPGQ vulnerabilities
Vulnerabilities for packages: keycloak...
Keycloak Build Process Exposes Sensitive Data
A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specified directly in...
GHSA-V7GV-XPGF-6395 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-V7GV-XPGF-6395 Keycloak Build Process Exposes Sensitive Data
A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specified directly in...
GHSA-V7GV-XPGF-6395 vulnerabilities
Vulnerabilities for packages: keycloak...
Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path
A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider...
GHSA-5545-R4HG-RJ4M Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path
A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider...
GHSA-5545-R4HG-RJ4M vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-5545-R4HG-RJ4M vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-WQ8X-CG39-8MRR vulnerabilities
Vulnerabilities for packages: keycloak...
org.keycloak:keycloak-services has Inefficient Regular Expression Complexity
A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lead to a denial of service DoS scenario by exhausting system resources due to a Regex complexity...
GHSA-WQ8X-CG39-8MRR org.keycloak:keycloak-services has Inefficient Regular Expression Complexity
A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lead to a denial of service DoS scenario by exhausting system resources due to a Regex complexity...