Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:22:04 +0000 EUVD-2026-42293 https://cve.radiocsirt.org/vuln/euvd-2026-42293 EUVD-2026-42293 https://cve.radiocsirt.org/vuln/euvd-2026-42293 fkie_cve-2020-14302 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14302 <p>A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same &#34;state&#34; parameter. This flaw allows a malicious user to perform replay attacks.</p> <p>A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same &#34;state&#34; parameter. This flaw allows a malicious user to perform replay attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14302 GHSA-74gp-x82w-5v28 https://cve.radiocsirt.org/vuln/ghsa-74gp-x82w-5v28 <p>A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same &#34;state&#34; parameter. This flaw allows a malicious user to perform replay attacks.</p> <p>A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same &#34;state&#34; parameter. This flaw allows a malicious user to perform replay attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-74gp-x82w-5v28 gsd-2020-14302 https://cve.radiocsirt.org/vuln/gsd-2020-14302 gsd-2020-14302 https://cve.radiocsirt.org/vuln/gsd-2020-14302 RHSA-2021:0967 — Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 6 https://cve.radiocsirt.org/vuln/rhsa-2021:0967 <p>nodejs-angular: XSS due to regex-based HTML replacement keycloak: reusable &#34;state&#34; parameter at redirect_uri endpoint enables possibility of replay attacks</p> <p>nodejs-angular: XSS due to regex-based HTML replacement keycloak: reusable &#34;state&#34; parameter at redirect_uri endpoint enables possibility of replay attacks</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0967