CVE-2024-53843
1 advisory.
npm/@dapperduckling/keycloak-connector-server CVE-2024-53843: high 8.1
@dapperduckling/keycloak-connector-server has Reflected XSS Vulnerability in Authentication Flow URL Handling
Action: Upgrade @dapperduckling/keycloak-connector-server to 2.5.5 or later.
npm i @dapperduckling/keycloak-connector-server@2.5.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.5 | - |
Fixed versions
| 2.5.5 |
Sources
- osv: GHSA-w5rq-g9r6-vrcg
- https://github.com/DapperDuckling/keycloak-connector/security/advisories/GHSA-w5rq-g9r6-vrcg
- https://nvd.nist.gov/vuln/detail/CVE-2024-53843
- https://github.com/DapperDuckling/keycloak-connector
CVE-2024-53843 · published · modified · JSON