https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:00:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-03210 bdu:2019-03210 https://cve.radiocsirt.org/vuln/bdu:2019-03210 https://cve.radiocsirt.org/vuln/cnvd-2019-44529 cnvd-2019-44529 https://cve.radiocsirt.org/vuln/cnvd-2019-44529 https://cve.radiocsirt.org/vuln/euvd-2026-53455 EUVD-2026-53455 https://cve.radiocsirt.org/vuln/euvd-2026-53455 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10201 <p>It was found that Keycloak&#39;s SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the &lt;Signature&gt; sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.</p> <p>It was found that Keycloak&#39;s SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the &lt;Signature&gt; sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10201 https://cve.radiocsirt.org/vuln/ghsa-4fgq-gq9g-3rw7 <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>It was found that Keycloak&#39;s SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the &lt;Signature&gt; sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>It was found that Keycloak&#39;s SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the &lt;Signature&gt; sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.</p> https://cve.radiocsirt.org/vuln/ghsa-4fgq-gq9g-3rw7 https://cve.radiocsirt.org/vuln/gsd-2019-10201 gsd-2019-10201 https://cve.radiocsirt.org/vuln/gsd-2019-10201 https://cve.radiocsirt.org/vuln/rhsa-2019:2483 <p>keycloak: CSRF check missing in My Resources functionality in the Account Console keycloak: SAML broker does not check existence of signature on document allowing any user impersonation</p> <p>keycloak: CSRF check missing in My Resources functionality in the Account Console keycloak: SAML broker does not check existence of signature on document allowing any user impersonation</p> https://cve.radiocsirt.org/vuln/rhsa-2019:2483