Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS
A potential security flaw in the "checkLoginIframe" which allows unvalidated cross-origin messages, enabling potential DDoS attacks. By exploiting this vulnerability, attackers could coordinate to send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages. #### Acknowledgements Special thanks to Adriano Márcio Monteiro from BRZTEC for reporting this issue and helping us improve our project.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-1249US | — | — | ||
A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2024:1860WEB
- https://access.redhat.com/errata/RHSA-2024:1861WEB
- https://access.redhat.com/errata/RHSA-2024:1862WEB
- https://access.redhat.com/errata/RHSA-2024:1864WEB
- https://access.redhat.com/errata/RHSA-2024:1866WEB
- https://access.redhat.com/errata/RHSA-2024:1867WEB
- https://access.redhat.com/errata/RHSA-2024:1868WEB
- https://access.redhat.com/errata/RHSA-2024:2945WEB
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan