CVE-2024-8698
1 advisory.
Maven/org.keycloak:keycloak-saml-core CVE-2024-8698: high 7.7
Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak
Action: Upgrade org.keycloak:keycloak-saml-core to 22.0.13 (22.x), 24.0.8 (24.x) or 25.0.6 (25.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 22.0.13 | - |
| 23.0.0 | 24.0.8 | - |
| 25.0.0 | 25.0.6 | - |
Fixed versions
| 22.0.13 | 24.0.8 | 25.0.6 |
Sources
- osv: GHSA-xgfv-xpx8-qhcr
- https://github.com/keycloak/keycloak/security/advisories/GHSA-xgfv-xpx8-qhcr
- https://nvd.nist.gov/vuln/detail/CVE-2024-8698
- https://github.com/keycloak/keycloak/releases/tag/25.0.6
- https://github.com/keycloak/keycloak
- https://bugzilla.redhat.com/show_bug.cgi?id=2311641
- https://access.redhat.com/security/cve/CVE-2024-8698
- https://access.redhat.com/errata/RHSA-2024:8826
- https://access.redhat.com/errata/RHSA-2024:8824
- https://access.redhat.com/errata/RHSA-2024:8823
- https://access.redhat.com/errata/RHSA-2024:6890
- https://access.redhat.com/errata/RHSA-2024:6889
- https://access.redhat.com/errata/RHSA-2024:6888
- https://access.redhat.com/errata/RHSA-2024:6887
- https://access.redhat.com/errata/RHSA-2024:6886
- https://access.redhat.com/errata/RHSA-2024:6882
- https://access.redhat.com/errata/RHSA-2024:6880
- https://access.redhat.com/errata/RHSA-2024:6879
- https://access.redhat.com/errata/RHSA-2024:6878
CVE-2024-8698 · published · modified · JSON