Maven/org.keycloak:keycloak-quarkus-server CVE-2024-10973: medium 5.7, EPSS 0.27%

Keycloak on Quarkus CLI option for encrypted JGroups ignored

Action: Upgrade org.keycloak:keycloak-quarkus-server to 26.0.6 or later.

Affected

Fixed versions

Sources

• osv: GHSA-g6qq-c9f9-2772
• https://github.com/keycloak/keycloak/security/advisories/GHSA-g6qq-c9f9-2772
• https://nvd.nist.gov/vuln/detail/CVE-2024-10973
• https://github.com/keycloak/keycloak/issues/28750
• https://github.com/keycloak/keycloak/issues/34644
• https://github.com/keycloak/keycloak/pull/28756
• https://github.com/keycloak/keycloak/pull/34668
• https://github.com/keycloak/keycloak/commit/071032a108bd9e9fce9e66d00c36d56bd4b334df
• https://github.com/keycloak/keycloak/commit/36defd5f33b2da5d705f179bbaa21c28b13a9996
• https://access.redhat.com/security/cve/CVE-2024-10973
• https://bugzilla.redhat.com/show_bug.cgi?id=2324361
• https://github.com/keycloak/keycloak

CVE-2024-10973 · published 2025-02-05T21:18:26Z · modified 2025-02-05T21:42:03.741955Z · JSON