CVE-2023-6134Medium· 4.6▾ SunlitA flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (X…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.3 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.9%
0.9% → 1.3%
A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.
single_sign-on < 7.6keycloak < 22.0.7openshift_container_platform = 4.11openshift_container_platform = 4.12openshift_container_platform_for_power = 4.9openshift_container_platform_for_power = 4.10openshift_container_platform_ibm_z_systems = 4.9openshift_container_platform_ibm_z_systems = 4.10single_sign-onUpgrade past the affected range:
single_sign-on 7.6keycloak 22.0.7Connected by shared product, vendor, weakness, or advisory.
CVE-2026-19548Medium· 5.5Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils
CVE-2026-19617Medium· 5.5A flaw was found in libdm
CVE-2026-12542Medium· 5.3A flaw was found in Foreman
CVE-2026-96659Critical· 9.1A flaw was found in Foreman
CVE-2026-12544High· 7.7A flaw was found in Foreman
CVE-2026-12541High· 8.2A flaw was found in Foreman