keycloak-adapter-eap6 vulnerabilities

CVEs whose affected-version data names the keycloak-adapter-eap6 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-1249High· 7.4

2y ago

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly i…

▾ TwilightRed Hat · keycloakEPSS 0.45%via NVD