CVE-2024-11734

MediumCVSS 6.5/10Last modified Aug 31, 2026

Description

A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service. This action is done by modifying any of the security headers and inserting newlines, which causes the Keycloak server to write to a request that has already been terminated, leading to the failure of said request.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-693

Affected software

No affected versions have been published.

Timeline

Published: Jan 14, 2025
Last modified: Aug 31, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-117364.9A vulnerability was found in Keycloak. Admin users may have to access sensitive server environment variables and system properties through u CVE-2024-117379.8CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of th CVE-2024-117387.5A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello me CVE-2024-117399.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Case Informatics Case ERP allows SQL I CVE-2024-11748.2Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security vulnerabilities. HP has released HP ThinPr CVE-2024-117407.3The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. T CVE-2024-117414.3Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected CVE-2024-117425.4A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue a CVE-2024-117434.3A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an un CVE-2024-117449.8A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerabili CVE-2024-117459.8A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function route_static_check of CVE-2024-117465.4The Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin plugin for WordPress is vulnerable to Stor