single_sign_on vulnerabilities
CVEs whose affected-version data names the single_sign_on package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
62 CVEsRSS
CVE-2024-3656High· 8.1PoCA flaw was found in Keycloak
A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading t…
▾ MidnightRed Hat · Red Hat Build of KeycloakEPSS 3.3%via NVD
CVE-2024-4540High· 7.5A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR)
A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR). Client-provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the authorization server's HTTP response to a `request…
▾ TwilightRed Hat · Red Hat build of Keycloak 22EPSS 0.55%via NVD