Migration Toolkit For Applications

migration_toolkit_for_applications

Vendor: Redhat • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-1132 1Redhat 10Build Of Keycloak Jboss Middleware Text Only AdvisoriesKeycloak+7 more Jun 17, 2026 Apr 17, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive...Show more A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.Show less
CVE-2023-6291 1Redhat 7Keycloak Migration Toolkit For ApplicationsOpenshift Container Platform+4 more Jun 17, 2026 Jan 26, 2024 N/A· v4 7.1 HIGH· v3 N/A· v2 A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for...Show more A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.Show less
CVE-2023-44487 33Akka AmazonApache+30 more 165.net 3scale Api Management PlatformAdvanced Cluster Management For Kubernetes+162 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2022-4492 1Redhat 10Build Of Quarkus Integration Camel For Spring BootIntegration Camel K+7 more Jun 17, 2026 Feb 23, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add...Show more The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.Show less