Keycloak Authentication

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-24457 Maven MEDIUM PATCH This Month

A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Jenkins CSRF Keycloak Authentication

NVD

CVSS 3.1

6.5

EPSS

1.0%

CVE-2023-24456 Maven CRITICAL PATCH Act Now

Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Jenkins Session Fixation Information Disclosure Keycloak Authentication

NVD

CVSS 3.1

9.8

EPSS

1.2%

CVE-2023-24457 Maven

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Jenkins CSRF Keycloak Authentication

NVD

CVE-2023-24456 Maven

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Jenkins Session Fixation Information Disclosure +1

NVD