https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:56:53 +0000 https://cve.radiocsirt.org/vuln/cve-2019-3868 <p><strong>Affected:</strong> Red Hat keycloak</p> <p>Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session.</p> <p><strong>Affected:</strong> Red Hat keycloak</p> <p>Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session.</p> https://cve.radiocsirt.org/vuln/cve-2019-3868