https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:06:46.911349+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-3868 CVE-2019-3868 2026-10-03T23:06:46.933303+00:00

Affected: Red Hat keycloak

Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session.