Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 98
Reset filtersKeycloak path traversal vulnerability in redirection validation
Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS
Keycloak vulnerable to log Injection during WebAuthn authentication or registration
Keycloak Authorization Bypass vulnerability
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow
Keycloak secondary factor bypass in step-up authentication
Keycloak path traversal vulnerability in the redirect validation
The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted
Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri
Keycloak vulnerable to LDAP Injection on UsernameForm Login
Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients
Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
Client Spoofing within the Keycloak Device Authorisation Grant
Keycloak vulnerable to user impersonation via stolen UUID code
HTML Injection in Keycloak Admin REST API
Keycloak vulnerable to Cross-site Scripting
JBoss KeyCloak Open Redirect
JBoss KeyCloak is vulnerable to soft token deletion via CSRF
JBoss Keycloak CSRF Vulnerability
Keycloak Authentication Error
Keycloak is vulnerable to IDN homograph attack
Keycloak is vulnerable to IDN homograph attack
Keycloak vulnerable to privilege escalation on Token Exchange feature
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.