Red Hat OpenShift Container Platform 4.9

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.

Rhsso-container-image: unsecured management interface exposed to adjecent network

Keycloak: path transversal in redirection validation

Keycloak: client access via device auth request spoof

Keycloak: offline session token dos

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

Undertow: outofmemoryerror due to @multipartconfig handling

Undertow: infinite loop in sslconduit during close

Keycloak: redirect_uri validation bypass

Keycloak: session takeover with oidc offline refreshtokens

Keycloak: potential bypass of brute force protection

Keycloak: vulnerable redirect uri validation results in open redirec

Keycloak: reflected xss via wildcard in oidc redirect_uri