Homepage

org.keycloak:keycloak-saml-core@1.5.0-Final

  • latest version

    26.7.2

  • first published

    11 years ago

  • latest version published

    12 days ago

  • licenses detected

  • package registry

    View on Maven Central Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.keycloak:keycloak-saml-core package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Replay Attack

    org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak.

    Affected versions of this package are vulnerable to Replay Attack through IdP-initiated broker logins in the services/src/main/java/org/keycloak/broker/saml component. An attacker can hijack a user session and gain unauthorized access by resending a captured, valid SAML assertion that contains a OneTimeUse condition. When Keycloak accepts the assertion without tracking whether that assertion ID was already used, the same unused response can be replayed multiple times against the broker flow. This affects deployments using Keycloak as a SAML identity broker with IdP-initiated login enabled.

    How to fix Replay Attack?

    A fix was pushed into the master branch but not yet published.

    [0,)
    • M
    Improper Handling of Extra Parameters

    org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak.

    Affected versions of this package are vulnerable to Improper Handling of Extra Parameters through the generateRedirectUri logic in org.keycloak.saml.BaseSAML2BindingBuilder. An attacker can cause a user’s SAML login response to be appended to attacker-controlled query parameters by sending a crafted SAML HTTP-Redirect request that targets a client with a wildcard redirect URL. When the user authenticates, Keycloak preserves the attacker-supplied parameters alongside SAMLResponse or SAMLRequest and RelayState, which can make a service provider process the wrong values. This can log the user into the attacker’s chosen account or otherwise misassociate the authentication response with the wrong session.

    How to fix Improper Handling of Extra Parameters?

    A fix was pushed into the master branch but not yet published.

    [0,)
    • H
    Improper Validation of Syntactic Correctness of Input

    org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak.

    Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the SAMLParser and SAML11ParserUtil code paths that handle SAML 1.1 assertions and protocol requests. An attacker can trigger a ParsingException and disrupt SAML request processing by supplying malformed SAML 1.1 XML, including unexpected text or invalid event sequences inside Assertion, AttributeQuery, AuthenticationQuery, or AuthorizationDecisionQuery elements.

    Note: While the fix was back-ported to version 26.4.12, this version has not been published to Maven Central

    How to fix Improper Validation of Syntactic Correctness of Input?

    Upgrade org.keycloak:keycloak-saml-core to version 26.6.2 or higher.

    [,26.6.2)
    • M
    Exposure of Sensitive Information Through Environmental Variables

    org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak.

    Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Environmental Variables through user-configurable URLs.

    Exploiting this vulnerability is possible with the configuration of backchannel logout URLs or admin URLs, when including placeholders like ${env.VARNAME} or ${PROPNAME}, which are replaced with actual values during URL processing. An attacker can access sensitive server environment variables and system properties.

    How to fix Exposure of Sensitive Information Through Environmental Variables?

    Upgrade org.keycloak:keycloak-saml-core to version 26.0.8 or higher.

    [,26.0.8)
    • M
    Improper Verification of Cryptographic Signature

    org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak.

    Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to the flawed SAML signature validation method in the XMLSignatureUtil class. An attacker can escalate privileges or impersonate another user by crafting responses that bypass the validation process.

    How to fix Improper Verification of Cryptographic Signature?

    Upgrade org.keycloak:keycloak-saml-core to version 22.0.13, 24.0.8, 25.0.6 or higher.

    [,22.0.13)[23.0.0,24.0.8)[25.0.0,25.0.6)
    • M
    Improper Verification of Cryptographic Signature

    org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak.

    Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature improper validation logic in the signature validation method, which relies on the position of signatures rather than explicitly checking the referenced elements. An attacker can escalate privileges or impersonate another user by crafting responses that bypass the signature validation. This facilitates unauthorized access to high-privileged accounts in SAML-based identity providers and service providers.

    How to fix Improper Verification of Cryptographic Signature?

    Upgrade org.keycloak:keycloak-saml-core to version 22.0.13, 24.0.8, 25.0.6 or higher.

    [,22.0.13)[23.0.0,24.0.8)[25.0.0,25.0.6)
    • H
    Arbitrary Code Execution

    org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak.

    Affected versions of this package are vulnerable to Arbitrary Code Execution. It allows arbitrary Javascript to be uploaded for SAML protocol mapper even if UPLOAD_SCRIPTS feature disabled. An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled.

    How to fix Arbitrary Code Execution?

    Upgrade org.keycloak:keycloak-saml-core to version 19.0.2 or higher.

    [,19.0.2)
    • M
    Information Exposure

    org.keycloak:keycloak-saml-core is an Open Source Identity and Access Management For Modern Applications and Services.

    Affected versions of this package are vulnerable to Information Exposure. While parsing SAML messages, the StaxParserUtil class replaced special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the InResponseTo field in the response.

    How to fix Information Exposure?

    Upgrade org.keycloak:keycloak-saml-core to version 2.5.1 or higher.

    [,2.5.1.Final)
    • M
    Information Exposure

    org.keycloak:keycloak-saml-core is an open Source Identity and Access Management for modern Applications and Services.

    Affected versions of the package are vulnerable to Information Exposure. In certain cases, the SAML request parser replaces special strings with system properties.

    How to fix Information Exposure?

    Upgrade org.keycloak:keycloak-saml-core to version 2.5.1.Final or higher.

    [,2.5.1.Final)
    • H
    Denial of Service (DoS)

    org.keycloak:keycloak-saml-core Affected versions of this package are vulnerable to Denial of Service (DoS) attacks. It mishandles Logout requests that contain an Extension element, which triggers an infinite loop.

    [1.2.0.Final,2.5.5.Final)
    Go back to all versions of this package