https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:12:44.414981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373357 EUVD-2026-373357 2026-10-03T13:12:44.659786+00:00 EUVD-2026-373357 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6134 fkie_cve-2023-6134 2026-10-03T13:12:44.659833+00:00

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.

 https://cve.radiocsirt.org/vuln/ghsa-cvg2-7c3j-g36j GHSA-cvg2-7c3j-g36j — Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri 2026-10-03T13:12:44.659869+00:00

Affected: Maven: org.keycloak:keycloak-services

Keycloak prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This could permit an attacker to submit a specially crafted request leading to XSS or possibly further attacks.

 https://cve.radiocsirt.org/vuln/gsd-2023-6134 gsd-2023-6134 2026-10-03T13:12:44.659895+00:00 gsd-2023-6134 https://cve.radiocsirt.org/vuln/rhsa-2023:7854 RHSA-2023:7854 — Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 7 2026-10-03T13:12:44.659909+00:00

keycloak: reflected XSS via wildcard in OIDC redirect_uri keycloak: redirect_uri validation bypass keycloak: offline session token DoS

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2901 WID-SEC-W-2023-2901 — Keycloak: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T13:12:44.659930+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.