CLEANSTART-2026-SG80587
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SG80587.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2026-SG80587
- Upstream
- Published
- 2026-01-30T14:00:21.027172Z
- Modified
- 2026-02-20T09:15:31.190283Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session
- Details
-
Multiple security vulnerabilities affect the keycloak package. It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. See references for individual vulnerability details.
- References
-
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SG80587.json
- https://osv.dev/vulnerability/CVE-2017-12158
- https://osv.dev/vulnerability/CVE-2017-12159
- https://osv.dev/vulnerability/GHSA-45p5-v273-3qqr
- https://osv.dev/vulnerability/GHSA-5rfx-cp42-p624
- https://osv.dev/vulnerability/GHSA-84h7-rjj3-6jx4
- https://osv.dev/vulnerability/GHSA-h5fg-jpgr-rv9c
- https://nvd.nist.gov/vuln/detail/CVE-2017-12158
- https://nvd.nist.gov/vuln/detail/CVE-2017-12159