Migration Toolkit For Runtimes vulnerabilities

2 known vulnerabilities in Migration Toolkit For Runtimes from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Migration Toolkit for Runtimes 1 on RHEL 8: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-1132Apr 17, 2024Red HatEPSS 1.55%

  A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct

• 7.5 High severity

  undertow: Server-Side Request Forgery

  CVE-2022-4492Feb 23, 2023Undertow

  The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.