CVE-2023-6787: Keycloak Session Hijacking Exploit due to Flaw in Re-Authentication Mechanism
A recently discovered vulnerability, assigned CVE-2023-6787, affects Keycloak, a popular open-source identity and access management solution. This security flaw has significant implications, as it allows
CVE-2023-3597 - Keycloak Authentication Bypass Vulnerability via Client Step-Up Authentication Misvalidation
A critical security vulnerability (CVE-2023-3597) has been discovered in Keycloak, a widely-used open-source Identity and Access Management (IAM) solution. This vulnerability allows an attacker to