PT-2019-3221

Name of the Vulnerable Software and Affected Versions Keycloak versions up to 6.0.1 Description The issue is related to the SAML broker component, which does not properly verify missing message signatures. This allows an attacker to modify the SAML Response by removing the sections, and the messa...