Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update
cxf: JMX integration is vulnerable to a MITM attack keycloak: OIDC redirect_uri allows dangerous schemes resulting in potential XSS picketbox: JBoss EAP reload to admin-only mode allows authentication bypass wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS keycloak: path traversal in resources keycloak: user can manage resources with just "view-profile" role using new Account Console
cpe:/a:redhat:jboss_single_sign_on:7.4