Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:25:03 +0000 EUVD-2026-67163 https://cve.radiocsirt.org/vuln/euvd-2026-67163 EUVD-2026-67163 https://cve.radiocsirt.org/vuln/euvd-2026-67163 fkie_cve-2018-14658 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14658 <p>A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack</p> <p>A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-14658 GHSA-3qh2-mccc-q5m6 — Keycloak Open Redirect https://cve.radiocsirt.org/vuln/ghsa-3qh2-mccc-q5m6 <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in `org.keycloak.protocol.oidc.utils.RedirectUtils` before the redirect url is verified. This can lead to an Open Redirection attack</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in `org.keycloak.protocol.oidc.utils.RedirectUtils` before the redirect url is verified. This can lead to an Open Redirection attack</p> https://cve.radiocsirt.org/vuln/ghsa-3qh2-mccc-q5m6 gsd-2018-14658 https://cve.radiocsirt.org/vuln/gsd-2018-14658 gsd-2018-14658 https://cve.radiocsirt.org/vuln/gsd-2018-14658 RHSA-2018:3592 — Red Hat Security Advisory: Red Hat Single Sign-On 7.2.5 on RHEL 6 security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2018:3592 <p>keycloak: auth permitted with expired certs in SAML client keycloak: expiration not validated in SAML broker consumer endpoint keycloak: XSS-Vulnerability with response_mode=form_post keycloak: brute force protection not working for the entire login workflow keycloak: Open Redirect in Login and Logout</p> <p>keycloak: auth permitted with expired certs in SAML client keycloak: expiration not validated in SAML broker consumer endpoint keycloak: XSS-Vulnerability with response_mode=form_post keycloak: brute force protection not working for the entire login workflow keycloak: Open Redirect in Login and Logout</p> https://cve.radiocsirt.org/vuln/rhsa-2018:3592