DeutschShown in its original language — a full translation is planned for a future version.
Keycloak: Mehrere Schwachstellen
view advisory published 2023-01-12
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um einen Denial of Service Angriff durchzuführen und Sicherheitsmaßnahmen zu umgehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0091US | low3.8OT elevated | — | ||
A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify… | ||||
| CVE-2022-41966US | high7.5 | Exploit | ||
XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a… | ||||
| CVE-2022-40151US | high7.5 | — | ||
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that… | ||||
| CVE-2022-25857US | high7.5 | — | ||
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:1006 vom 2023-03-09external
- Red Hat Security Advisory RHSA-2023:1043 vom 2023-03-02external
- Red Hat Security Advisory RHSA-2023:1044 vom 2023-03-02external
- Red Hat Security Advisory RHSA-2023:1045 vom 2023-03-02external
- Red Hat Security Advisory RHSA-2023:1047 vom 2023-03-02external
- Red Hat Security Advisory RHSA-2023:1049 vom 2023-03-02external
- Red Hat Security Advisory RHSA-2023:1177 vom 2023-03-09external
- Red Hat Security Advisory RHSA-2023:1286 vom 2023-03-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan