Keycloak Vulnerabilities
11 vulnerabilities related to Keycloak
- PoC2026-08-25CVE-2026-18963: Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass
- PoC2026-01-08keycloak-admin-console-config: Keycloak Admin Console Configuration Disclosure
- PoC2025-08-01CVE-2020-10770: Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)
- PoC2025-08-01CVE-2020-27838: KeyCloak - Information Exposure
- PoC2025-08-01CVE-2021-20323: Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2024-3656: Keycloak < 24.0.5 - Broken Access Control
- PoC2025-08-01CVE-2024-8698: Keycloak - SAML Core Package Signature Validation Flaw
- PoC2025-08-01CVE-2024-8883: Keycloak - Open Redirect
- 2024-09-23Red Hat Keycloak 签名验证不当漏洞
- 2024-08-14Red Hat Keycloak 信息泄露漏洞
- 2024-03-26Keycloak <= 12.0.1存在SSRF漏洞(CVE-2020-10770)