Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:50:00 +0000 bdu:2019-00225 https://cve.radiocsirt.org/vuln/bdu:2019-00225 bdu:2019-00225 https://cve.radiocsirt.org/vuln/bdu:2019-00225 cnvd-2017-30240 https://cve.radiocsirt.org/vuln/cnvd-2017-30240 cnvd-2017-30240 https://cve.radiocsirt.org/vuln/cnvd-2017-30240 EUVD-2026-72388 https://cve.radiocsirt.org/vuln/euvd-2026-72388 EUVD-2026-72388 https://cve.radiocsirt.org/vuln/euvd-2026-72388 fkie_cve-2017-2582 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2582 <p>It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the &#34;InResponseTo&#34; field in the response.</p> <p>It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the &#34;InResponseTo&#34; field in the response.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-2582 GHSA-c77r-6f64-478q — keycloak-core discloses system properties https://cve.radiocsirt.org/vuln/ghsa-c77r-6f64-478q <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the &#34;InResponseTo&#34; field in the response.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the &#34;InResponseTo&#34; field in the response.</p> https://cve.radiocsirt.org/vuln/ghsa-c77r-6f64-478q gsd-2017-2582 https://cve.radiocsirt.org/vuln/gsd-2017-2582 gsd-2017-2582 https://cve.radiocsirt.org/vuln/gsd-2017-2582 RHSA-2017:2808 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update https://cve.radiocsirt.org/vuln/rhsa-2017:2808 <p>jasypt: Vulnerable to timing attack against the password hash comparison bouncycastle: Information disclosure in GCMBlockCipher keycloak: SAML request parser replaces special strings with system properties log4j: Socket receiver deserialization vulnerability hibernate-validator: Privilege escalation when running under the security manager</p> <p>jasypt: Vulnerable to timing attack against the password hash comparison bouncycastle: Information disclosure in GCMBlockCipher keycloak: SAML request parser replaces special strings with system properties log4j: Socket receiver deserialization vulnerability hibernate-validator: Privilege escalation when running under the security manager</p> https://cve.radiocsirt.org/vuln/rhsa-2017:2808