Beveiligingsadvies

CVE-2024-1249

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-17 13:22:48

Laatst bijgewerkt 2026-09-08 19:33:53

Toegewezen door redhat

CVSS-score 7.4

Status PUBLISHED

Beschrijving

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.

← Alle CVE's bekijken Bekijk op cve.org ↗