Keycloak 漏洞

时间轴

去年

版本

2.0	5
2.1	5
2.2	5
2.3	5
7.x	5

修正

Official Fix	59
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	50

易受攻击性

High	0
Functional	1
Proof-of-Concept	2
Unproven	0
Not Defined	106

访问向量

Not Defined	0
Physical	1
Local	4
Adjacent	30
Network	74

身份验证

Not Defined	0
High	7
Low	62
None	40

用户交互

Not Defined	0
Required	33
None	76

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	17
≤5	21
≤6	32
≤7	25
≤8	10
≤9	4
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	18
≤5	20
≤6	33
≤7	27
≤8	6
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	5
≤4	25
≤5	28
≤6	28
≤7	11
≤8	10
≤9	2
≤10	0

NVD

≤1	0
≤2	0
≤3	1
≤4	2
≤5	11
≤6	13
≤7	18
≤8	13
≤9	10
≤10	7

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	8
≤6	2
≤7	5
≤8	4
≤9	2
≤10	4

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	23
<2k	72
<5k	8
<10k	3
<25k	3
<50k	0
<100k	0
≥100k	0

本日攻击

<1k	102
<2k	6
<5k	0
<10k	1
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (62): 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 1, 1.0.1, 1.0.2, 1.0.3, 2, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 3.0, 3.2.1.Final, 3.4, 3.4.1, 3.4.3.Final, 4.0, 4.0.0.Beta2, 4.2.1.Final, 4.3.0.Final, 4.8, 4.8.1, 4.8.2, 6, 6.0, 6.0.1, 6.0.2, 7.0, 7.0.1, 8, 8.0, 8.0.1, 8.0.2, 9, 9.0, 9.0.1, 10.0, 10.0.1, 11.0, 11.0.3, 12, 12.0, 12.0.1, 13.0, 15.0, 15.1, 20.0, 20.0.1, 20.0.2, 22.0.5

已发布	Base	Temp	漏洞	0day	今天	易	修正	CTI	CVE
2024-04-17	5.7	5.7	Keycloak redirect_uri Redirect	$0-$5k	$0-$5k	Not Defined	Not Defined	0.26	CVE-2024-2419
2024-04-16	3.5	3.5	Keycloak SAML 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-6717
2024-04-16	3.5	3.5	Keycloak checkLoginIframe 权限升级	$0-$5k	$0-$5k	Not Defined	Not Defined	0.17	CVE-2024-1249
2024-04-16	3.5	3.5	Keycloak URL Redirect	$0-$5k	$0-$5k	Not Defined	Not Defined	0.09	CVE-2024-1132
2024-04-16	3.5	3.5	Keycloak Client Registration 权限升级	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-6544
2024-04-16	5.5	5.5	Keycloak Token Type Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.09	CVE-2023-0657
2024-04-16	6.3	6.3	Keycloak Client Step-Up Authentication 弱身份验证	$0-$5k	$0-$5k	Not Defined	Not Defined	0.08	CVE-2023-3597
2024-02-21	3.6	3.4	Keycloak Account Lockout 拒绝服务	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	CVE-2024-1722
2024-02-21	5.5	5.5	Keycloak 弱身份验证	$0-$5k	$0-$5k	Not Defined	Not Defined	0.22	CVE-2023-6787
2023-12-18	4.7	4.7	Red Hat Keycloak JARM Response Redirect	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-6927
2023-12-15	4.3	4.1	JBoss KeyCloak lowerCaseHostname Redirect	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-6291
2023-12-15	7.1	6.9	Red Hat keycloak/Single Sign-On/Middleware Container/ Admin User Interface 拒绝服务	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-6563
2023-12-12	4.5	4.5	JBoss KeyCloak Incomplete Fix CVE-2020-10748 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-6134
2023-12-04	4.3	4.3	JBoss KeyCloak WebAuthn 权限升级	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-6484
2023-11-30	5.5	5.3	Keycloak Login 权限升级	$0-$5k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2022-2232
2023-09-13	6.5	6.5	Keycloak User Registration 弱加密	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-4918
2023-06-28	6.5	6.5	Keycloak URL Scheme 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-4361
2023-06-27	5.5	5.5	Keycloak Device 权限升级	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-2585
2023-06-27	4.6	4.6	Keycloak mTLS Authentication 弱身份验证	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-2422
2023-05-23	5.7	5.7	keycloak 弱身份验证	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-1664
2023-04-28	7.7	7.6	HYPR Keycloak Authenticator Extension 弱身份验证	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-1477
2023-03-03	4.9	4.7	keycloak-connect Node.js Adapter Redirect	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2022-2237
2023-03-03	5.5	5.3	Keycloak 弱身份验证	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-0264
2023-03-01	3.5	3.4	Keycloak OpenID Connect Login Service 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2022-4137
2023-03-01	3.5	3.3	Keycloak 跨网站脚本	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	CVE-2022-1438

84 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 84 results.

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!