CVE-2024-10039
1 advisory.
Maven/org.keycloak:keycloak-core CVE-2024-10039: high 7.1
Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination
Action: Upgrade org.keycloak:keycloak-core to 26.0.6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.0.6 | - |
Fixed versions
| 26.0.6 |
Sources
- osv: GHSA-93ww-43rr-79v3
- https://github.com/keycloak/keycloak/security/advisories/GHSA-93ww-43rr-79v3
- https://github.com/keycloak/keycloak/issues/35217
- https://github.com/keycloak/keycloak
CVE-2024-10039 · published · modified · JSON