Mobile Application Platform (Redhat) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2024-09-10. Vendor: Redhat.

CVEs of Mobile Application Platform

• CVE-2023-6841 - CVSS 7.5 (high), 2024-09-10: A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests…
• CVE-2020-1723 - CVSS 6.1 (medium), 2021-01-28: A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of…
• CVE-2017-7553 - CVSS 6.3 (medium), 2017-09-29: The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network…
• CVE-2017-7552 - CVSS 9.8 (critical), 2017-09-29: A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as…
• CVE-2017-7554 - CVSS 6.1 (medium), 2017-09-29: It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack…