https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:21:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10695 bdu:2024-10695 https://cve.radiocsirt.org/vuln/bdu:2024-10695 https://cve.radiocsirt.org/vuln/euvd-2026-372744 EUVD-2026-372744 https://cve.radiocsirt.org/vuln/euvd-2026-372744 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10492 <p>A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider configuration and set up a Vault read file, which will only inform whether that file exists or not.</p> <p>A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider configuration and set up a Vault read file, which will only inform whether that file exists or not.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10492 https://cve.radiocsirt.org/vuln/ghsa-5545-r4hg-rj4m <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-quarkus-server</p> <p>A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider configuration and set up a Vault read file, which will only inform whether that file exists or not.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-quarkus-server</p> <p>A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider configuration and set up a Vault read file, which will only inform whether that file exists or not.</p> https://cve.radiocsirt.org/vuln/ghsa-5545-r4hg-rj4m https://cve.radiocsirt.org/vuln/rhsa-2024:10175 <p>org.keycloak/keycloak-quarkus-server: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability keycloak-core: mTLS passthrough org.keycloak:keycloak-services: Keycloak Denial of Service org.keycloak:keycloak-quarkus-server: Sensitive Data Exposure in Keycloak Build Process keycloak-quarkus-server: Keycloak path trasversal</p> <p>org.keycloak/keycloak-quarkus-server: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability keycloak-core: mTLS passthrough org.keycloak:keycloak-services: Keycloak Denial of Service org.keycloak:keycloak-quarkus-server: Sensitive Data Exposure in Keycloak Build Process keycloak-quarkus-server: Keycloak path trasversal</p> https://cve.radiocsirt.org/vuln/rhsa-2024:10175 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3525 <p>Ein Angreifer kann mehrere Schwachstellen in Keycloak und Red Hat OpenShift ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen</p> <p>Ein Angreifer kann mehrere Schwachstellen in Keycloak und Red Hat OpenShift ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3525