High 7.4Published Apr 17, 2024

CVE-2024-1249Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

Updated under an hour ago (Oct 28, 2026, 11:40 PM ET)

Does this affect you?

It affects Red Hat AMQ Broker 7 and 14 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Red Hat AMQ Broker 7

Exploited in the last 30 days

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.

CVSS: 7.4 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Weakness (CWE): CWE-346
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: redhat
NVD analysis: Deferred
Record last updated: Oct 26, 2026
First seen by InfoSec Signals: Oct 26, 2026

Affected products

Affected products

Red Hat Red Hat AMQ Broker 7 redhat:amq_broker	7.12	CNA record
Red Hat Red Hat build of Keycloak 22 redhat:build_keycloak	from 22.0.10-1 not affected	CNA record
Red Hat Red Hat Single Sign-On 7.6 for RHEL 7 redhat:red_hat_single_sign_on	from 0:18.0.13-1.redhat_00001.1.el7sso not affected	CNA record
Red Hat RHEL-8 based Middleware Containers redhat:rhosemc	from 7.6-46 not affected	CNA record
Red Hat RHOSS-1.33-RHEL-8 redhat:openshift_serverless	from 1.33.0-5 not affected	CNA record
Red Hat Migration Toolkit for Applications 6 redhat:migration_toolkit_applications	6	CNA record
Red Hat Red Hat build of Apicurio Registry 2 redhat:service_registry	2	CNA record
Red Hat Red Hat Data Grid 8 redhat:jboss_data_grid	8	CNA record
Red Hat Red Hat Decision Manager 7 redhat:jboss_enterprise_brms_platform	7	CNA record
Red Hat Red Hat Developer Hub 1 redhat:rhdh	1	CNA record
1–10 of 15

References

References

https://access.redhat.com/errata/RHSA-2024:1860	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2024:1861	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2024:1862	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2024:1864	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2024:1866	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2024:1867	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2024:1868	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2024:2945	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2024:4057	vendor-advisory, x-refsource-redhat
https://access.redhat.com/security/cve/CVE-2024-1249	vdb-entry, x-refsource-redhat
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.