Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 26
Reset filtersKeycloak has Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
Keycloak Cross-site Scripting on OpenID connect login service
Keycloak vulnerable to path traversal via double URL encoding
Keycloak vulnerable to session takeover with OIDC offline refreshtokens
Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console
Incorrect implementation of lockout feature in Keycloak
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Keycloak Authentication Error
Keycloak Authentication Error
Keycloak Reflected XSS
Keycloak CSRF Vulnerability
Keycloak vulnerable to cross-site scripting via the state parameter
Keycloak Oauth Implementation Error
Keycloak Improper Bruteforce Detection
Reflected XSS on clients-registrations endpoint
Keycloak insufficient session expiration
Improper Authentication for Keycloak
Generation of Error Message Containing Sensitive Information in Keycloak
Incorrect Authorization in keycloak
Path Traversal
Incorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in Keycloak
Allocation of Resources Without Limits or Throttling in Keycloak
Cross-site Scripting in Keycloak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.