https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:25:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05658 bdu:2023-05658 https://cve.radiocsirt.org/vuln/bdu:2023-05658 https://cve.radiocsirt.org/vuln/euvd-2026-6935 EUVD-2026-6935 https://cve.radiocsirt.org/vuln/euvd-2026-6935 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2422 <p>A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, therefore, access data that belongs to other clients.</p> <p>A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, therefore, access data that belongs to other clients.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2422 https://cve.radiocsirt.org/vuln/ghsa-3qh5-qqj2-c78f <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-services</p> <p>When a Keycloak server is configured to support mTLS authentication for OAuth/OpenID clients, it does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client and therefore access data that belongs to other clients.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-services</p> <p>When a Keycloak server is configured to support mTLS authentication for OAuth/OpenID clients, it does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client and therefore access data that belongs to other clients.</p> https://cve.radiocsirt.org/vuln/ghsa-3qh5-qqj2-c78f https://cve.radiocsirt.org/vuln/gsd-2023-2422 gsd-2023-2422 https://cve.radiocsirt.org/vuln/gsd-2023-2422 https://cve.radiocsirt.org/vuln/rhsa-2023:3883 <p>RHSSO: XSS due to lax URI scheme validation Undertow: Infinite loop in SslConduit during close keycloak: Untrusted Certificate Validation keycloak: oauth client impersonation keycloak: client access via device auth request spoof</p> <p>RHSSO: XSS due to lax URI scheme validation Undertow: Infinite loop in SslConduit during close keycloak: Untrusted Certificate Validation keycloak: oauth client impersonation keycloak: client access via device auth request spoof</p> https://cve.radiocsirt.org/vuln/rhsa-2023:3883 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1573 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Keycloak und Red Hat Single Sign On ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Keycloak und Red Hat Single Sign On ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1573