product of redhat

keycloak

4 thingsrelated by NVD

Severity

high 2 medium 2

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the… CVE-2023-6927	Severity medium
An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of… CVE-2023-6563	Severity high
A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A… CVE-2023-6291	Severity high
A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This… CVE-2023-6134	Severity medium