RHBA-2025:7525MediumCVSS 7.4

Red Hat Bug Fix Advisory: Red Hat build of Keycloak 26.2.4 Update

Published
May 13, 2025
Last Modified
October 30, 2026

🔗 CVE IDs covered (1)

CVE-2024-12397 →

📋 Description

CVE-2024-12397 — io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling

🎯 Affected products1

  • Red Hat Build of Keycloak

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. Workaround: Currently, no mitigation is available for this vulnerability.

🔗 References (2)