Known vulnerabilities in Keycloak 1.8.0.Alpha1

Vendor: Keycloak
Software: Keycloak
Version: 1.8.0.Alpha1
Software CPE: cpe:2.3:a:keycloak:keycloak:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Keycloak version 1.8.0.Alpha1 Keycloak 1.8.0.Alpha1 is affected by 10 vulnerabilities: 1 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
25.0.0 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171
CWE-203 Medium
No
No
25.0.0 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
25.0.0 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU83573 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-2232
CWE-90 High
No
No
23.0.1 29.11.2023 SB2023112922
#VU70169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-3782
CWE-22 Medium
No
No
20.0.2 13.12.2022 SB2022121342
SB2022121346
SB2022121348
and 14 more
#VU70166 - Insufficient Session Expiration
CVE-2022-3916
CWE-613 Low
No
No
19.0.3 13.12.2022 SB2022121340
SB2022121346
SB2022121348
and 7 more
#VU49112 - Permissions, Privileges, and Access Controls
CVE-2020-27826
CWE-264 Medium
No
No
12.0.0 21.12.2020 SB2020122130
SB2020122206
#VU49113 - Authentication Bypass by Capture-replay
CVE-2020-14302
CWE-294 Medium
No
No
- 15.12.2020 SB2020122131
SB2021032320
SB2021032321
and 2 more
#VU49114 - Server-Side Request Forgery (SSRF)
CVE-2020-10770
CWE-918 Medium
Public exploit available
No
- 15.12.2020 SB2020122131
SB2021020313
SB2021020314
and 1 more
#VU47487 - Protection Mechanism Failure
CVE-2020-1728
CWE-693 Low
No
No
10.0.0 06.04.2020 SB2020040631
SB2020081828
SB2020081829
and 1 more