https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:51:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-49780 EUVD-2026-49780 https://cve.radiocsirt.org/vuln/euvd-2026-49780 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3868 <p>Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session.</p> <p>Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3868 https://cve.radiocsirt.org/vuln/ghsa-gc52-xj6p-9pxp <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user?s browser session.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user?s browser session.</p> https://cve.radiocsirt.org/vuln/ghsa-gc52-xj6p-9pxp https://cve.radiocsirt.org/vuln/gsd-2019-3868 gsd-2019-3868 https://cve.radiocsirt.org/vuln/gsd-2019-3868 https://cve.radiocsirt.org/vuln/rhsa-2019:0856 <p>keycloak: session hijack using the user access token</p> <p>keycloak: session hijack using the user access token</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0856