Open-Source Security Intelligence

Know every vulnerability
before it knows you.

DevGuard continuously monitors your dependencies and alerts you when CVEs like this one affect your stack — with real-time threat intelligence built for developers.

Search

RHSA-2023:1044

CriticalCVSS 9.8 / 10
Published Sep 30, 2024·Last modified May 10, 2026
Affected Components(0)

No affected components available

Description

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

Risk Scores
Base Score
9.8

The vulnerability can be exploited over the network without needing physical access. It is easy for an attacker to exploit this vulnerability. An attacker does not need any special privileges or access rights. No user interaction is needed for the attacker to exploit this vulnerability. The impact is confined to the system where the vulnerability exists. There is a high impact on the confidentiality of the information. There is a high impact on the integrity of the data. There is a high impact on the availability of the system.

Threat Intelligence
9.8

Active exploitation in the wild has been confirmed. Immediate patching or mitigation is required.

EPSS
99.57%

The exploit probability is critical. The vulnerability is very likely to be exploited in the next 30 days.

Exploit
Not available

We did not find any exploit available. Neither in GitHub repositories nor in the Exploit-Database.

Related Vulnerabilities
  • CVE-2018-14040

    In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

    UpstreamEPSS 4.1%
  • CVE-2018-14042

    In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

    UpstreamEPSS 4.0%
  • CVE-2019-11358

    jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

    UpstreamEPSS 87.2%
  • CVE-2020-11022

    In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

    UpstreamEPSS 99.0%
  • CVE-2020-11023

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

    UpstreamEPSS 83.8%
  • CVE-2021-35065

    The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

    UpstreamEPSS 1.6%
  • CVE-2021-44906
    Upstream
  • CVE-2022-1274

    A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.

    UpstreamEPSS 0.7%
  • CVE-2022-1438
    Upstream
  • CVE-2022-1471

    SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.

    UpstreamEPSS 99.6%
  • CVE-2022-24785

    Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js.

    UpstreamEPSS 5.5%
  • CVE-2022-25857

    The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

    UpstreamEPSS 2.2%
  • CVE-2022-2764

    A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

    UpstreamEPSS 0.8%
  • CVE-2022-31129

    moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.

    UpstreamEPSS 4.9%
  • CVE-2022-37603

    A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.

    UpstreamEPSS 2.0%
  • CVE-2022-38749

    Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

    UpstreamEPSS 1.6%
  • CVE-2022-38750

    Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

    UpstreamEPSS 1.0%
  • CVE-2022-38751

    Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

    UpstreamEPSS 1.5%
  • CVE-2022-3916

    A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to resolve a user session attached to a previously authenticated user; when utilizing the refresh token, they will be issued a token for the original user.

    UpstreamEPSS 1.0%
  • CVE-2022-40149

    Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

    UpstreamEPSS 1.3%
  • CVE-2022-40150

    Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack.

    UpstreamEPSS 1.3%
  • CVE-2022-4137
    Upstream
  • CVE-2022-42003

    In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

    UpstreamEPSS 2.7%
  • CVE-2022-42004

    In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.

    UpstreamEPSS 2.7%
  • CVE-2022-45047

    Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.

    UpstreamEPSS 3.6%
  • CVE-2022-45693

    Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

    UpstreamEPSS 1.4%
  • CVE-2022-46175

    JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `__proto__`, allowing specially crafted strings to pollute the prototype of the resulting object. This vulnerability pollutes the prototype of the object returned by `JSON5.parse` and not the global Object prototype, which is the commonly understood definition of Prototype Pollution. However, polluting the prototype of a single object can have significant security impact for an application if the object is later used in trusted operations. This vulnerability could allow an attacker to set arbitrary and unexpected keys on the object returned from `JSON5.parse`. The actual impact will depend on how applications utilize the returned object and how they filter unwanted keys, but could include denial of service, cross-site scripting, elevation of privilege, and in extreme cases, remote code execution. `JSON5.parse` should restrict parsing of `__proto__` keys when parsing JSON strings to objects. As a point of reference, the `JSON.parse` method included in JavaScript ignores `__proto__` keys. Simply changing `JSON5.parse` to `JSON.parse` in the examples above mitigates this vulnerability. This vulnerability is patched in json5 versions 1.0.2, 2.2.2, and later.

    UpstreamEPSS 9.3%
  • CVE-2022-46363

    A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to be used together, and so the vulnerability can only arise if the CXF service is misconfigured.

    UpstreamEPSS 1.2%
  • CVE-2022-46364

    A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

    UpstreamEPSS 2.1%
  • CVE-2023-0091
    Upstream
  • CVE-2023-0264
    Upstream
  • EUVD-2018-0445
    Upstream
  • EUVD-2019-0403
    Upstream
  • EUVD-2020-0383
    Upstream
  • EUVD-2020-0387
    Upstream
  • EUVD-2022-1589
    Upstream
  • EUVD-2022-1677
    Upstream
  • EUVD-2022-2255
    Upstream
  • EUVD-2022-35006
    Upstream
  • EUVD-2022-6318
    Upstream
  • EUVD-2022-6433
    Upstream
  • EUVD-2022-6470
    Upstream
  • EUVD-2022-6704
    Upstream
  • EUVD-2022-6753
    Upstream
  • EUVD-2022-6773
    Upstream
  • EUVD-2022-6839
    Upstream
  • EUVD-2022-6973
    Upstream
  • EUVD-2022-7006
    Upstream
  • EUVD-2022-7117
    Upstream
  • EUVD-2022-7159
    Upstream
  • EUVD-2022-7328
    Upstream
  • EUVD-2022-7492
    Upstream
  • EUVD-2022-7575
    Upstream
  • EUVD-2022-7580
    Upstream
  • EUVD-2022-7636
    Upstream
  • EUVD-2022-7690
    Upstream
  • EUVD-2022-7768
    Upstream
  • EUVD-2023-0552
    Upstream
  • EUVD-2023-0967
    Upstream
  • EUVD-2023-0968
    Upstream
  • EUVD-2023-1054
    Upstream
  • EUVD-2023-1124
    Upstream
Scan your project

Continuously monitor your dependencies and get alerted when vulnerabilities like this one affect your stack.

Checkout DevGuard