Most recent entries from all

bdu:2024-04939

2026-10-08T00:59:48.073519+00:00

bdu:2024-04939

EUVD-2026-277704

2026-10-08T00:59:48.073600+00:00

EUVD-2026-277704

fkie_cve-2024-4540

2026-10-08T00:59:48.073615+00:00

A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR). Client-provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the authorization server's HTTP response to a `request_uri` authorization request, possibly leading to an information disclosure vulnerability.

GHSA-69fp-7c8p-crjr — Keycloak exposes sensitive information in Pushed Authorization Requests (PAR)

2026-10-08T00:59:48.073649+00:00

Affected: Maven: org.keycloak:keycloak-services

A flaw was found in Keycloak in the OAuth 2.0 Pushed Authorization Requests (PAR). Client provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the authorization server's HTTP response to a request_uri authorization request. This could lead to an information disclosure vulnerability.

RHSA-2024:3566 — Red Hat Security Advisory: Red Hat Single Sign-On 7.6.9 security update on RHEL 7

2026-10-08T00:59:48.073674+00:00

keycloak: exposure of sensitive information in Pushed Authorization Requests (PAR) KC_RESTART cookie

WID-SEC-W-2024-1279 — Red Hat Single Sign On und Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen

2026-10-08T00:59:48.073694+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Single Sign On und Keycloak ausnutzen, um Informationen offenzulegen.