CVE-2024-8698: Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

I. Basic Information for CVE-2024-8698

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

Source: NVD (National Vulnerability Database)

Vulnerability Description

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L

Source: NVD (National Vulnerability Database)

Vulnerability Type

密码学签名的验证不恰当

Source: NVD (National Vulnerability Database)

Vulnerability Title

Red Hat Keycloak 数据伪造问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Red Hat Keycloak是美国红帽（Red Hat）公司的一套为现代应用和服务提供身份验证和管理功能的软件。 Red Hat Keycloak 25.0.6之前版本存在数据伪造问题漏洞，该漏洞源于SAML签名验证方法存在缺陷，允许攻击者创建可以绕过验证的精心设计的响应，从而导致权限提升或冒充攻击。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
-	-	0 ~ 25.0.5	-
Red Hat	Red Hat Build of Keycloak	-	`cpe:/a:redhat:build_keycloak:22`
Red Hat	Red Hat Build of Keycloak	-	`cpe:/a:redhat:build_keycloak:24`
Red Hat	Red Hat build of Keycloak 22	22.0.13-1 ~ *	`cpe:/a:redhat:build_keycloak:22::el9`
Red Hat	Red Hat build of Keycloak 22	22-18 ~ *	`cpe:/a:redhat:build_keycloak:22::el9`
Red Hat	Red Hat build of Keycloak 22	22-21 ~ *	`cpe:/a:redhat:build_keycloak:22::el9`
Red Hat	Red Hat build of Keycloak 24	24.0.8-1 ~ *	`cpe:/a:redhat:build_keycloak:24::el9`
Red Hat	Red Hat build of Keycloak 24	24-17 ~ *	`cpe:/a:redhat:build_keycloak:24::el9`
Red Hat	Red Hat build of Keycloak 24	24-17 ~ *	`cpe:/a:redhat:build_keycloak:24::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8	-	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0`
Red Hat	Red Hat JBoss Enterprise Application Platform 8	-	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.33.0-1.redhat_00015.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	1:2.0.0-2.redhat_00005.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:1.8.0-2.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.2.0-2.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:1.16.1-2.redhat_00007.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:3.2.2-28.redhat_2.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.15.1-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:3.14.0-2.redhat_00006.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:4.0.5-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	1:2.0.0-2.redhat_00005.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.0.1-1.redhat_00002.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:0.1.0-2.redhat_00010.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:1.12.284-2.redhat_00002.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:1.2.5-2.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:800.4.0-1.GA_redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.1.0-4.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:6.2.31-1.Final_redhat_00002.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:8.0.1-3.Final_redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:0.8.1-2.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:1.1.3-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:3.0.1-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:1.1.3-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:3.5.3-1.Final_redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:4.0.2-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:5.3.10-1.Final_redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.22.1-1.redhat_00002.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:6.0.3-1.Final_redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:9.37.3-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:9.6.0-1.redhat_00002.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.3.0-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.0.1-3.Final_redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:3.0.1-2.Final_redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:3.0.4-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:8.0.0-6.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.0.16-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:2.2.0-1.redhat_00001.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	0:8.0.4-2.GA_redhat_00005.1.el8eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.33.0-1.redhat_00015.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	1:2.0.0-2.redhat_00005.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:1.8.0-2.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.2.0-2.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:1.16.1-2.redhat_00007.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:3.2.2-28.redhat_2.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.15.1-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:3.14.0-2.redhat_00006.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:4.0.5-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	1:2.0.0-2.redhat_00005.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.0.1-1.redhat_00002.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:0.1.0-2.redhat_00010.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:1.12.284-2.redhat_00002.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:1.2.5-2.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:800.4.0-1.GA_redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.1.0-4.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:6.2.31-1.Final_redhat_00002.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:8.0.1-3.Final_redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:0.8.1-2.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:1.1.3-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:3.0.1-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:1.1.3-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:3.5.3-1.Final_redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:4.0.2-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:5.3.10-1.Final_redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.22.1-1.redhat_00002.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:6.0.3-1.Final_redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:9.37.3-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:9.6.0-1.redhat_00002.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.3.0-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.0.1-3.Final_redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:3.0.1-2.Final_redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:3.0.4-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:8.0.0-6.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.0.16-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:2.2.0-1.redhat_00001.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	0:8.0.4-2.GA_redhat_00005.1.el9eap ~ *	`cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9`
Red Hat	Red Hat Single Sign-On 7	-	`cpe:/a:redhat:red_hat_single_sign_on:7.6`
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 7	0:18.0.18-1.redhat_00001.1.el7sso ~ *	`cpe:/a:redhat:red_hat_single_sign_on:7.6::el7`
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 8	0:18.0.18-1.redhat_00001.1.el8sso ~ *	`cpe:/a:redhat:red_hat_single_sign_on:7.6::el8`
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 9	0:18.0.18-1.redhat_00001.1.el9sso ~ *	`cpe:/a:redhat:red_hat_single_sign_on:7.6::el9`
Red Hat	RHEL-8 based Middleware Containers	7.6-54 ~ *	`cpe:/a:redhat:rhosemc:1.0::el8`
Red Hat	Red Hat Build of Keycloak	-	`cpe:/a:redhat:build_keycloak:`
Red Hat	Red Hat Single Sign-On 7	-	`cpe:/a:redhat:red_hat_single_sign_on:7`

II. Public POCs for CVE-2024-8698

#	POC Description	Source Link	Shenlong Link
1	i'm noob with saml and keycloak . J4f	https://github.com/huydoppaz/CVE-2024-8698-POC	POC Details
2	A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8698.yaml	POC Details

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2024-8698

Please Login to view more intelligence information

https://access.redhat.com/security/cve/CVE-2024-8698vdb-entryx_refsource_REDHAT
https://github.com/keycloak/keycloak/blob/main/saml-core/src/main/java/org/keycloak/saml/processing/core/util/XMLSignatureUtil.java#L415
https://access.redhat.com/errata/RHSA-2024:8826vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6878vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:8823vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6889vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6880vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:8824vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6882vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6887vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6886vendor-advisoryx_refsource_REDHAT
https://nvd.nist.gov/vuln/detail/CVE-2024-8698

IV. Related Vulnerabilities

Same weakness: CWE-347

V. Comments for CVE-2024-8698

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2024-8698

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2024-8698

III. Intelligence Information for CVE-2024-8698

IV. Related Vulnerabilities

V. Comments for CVE-2024-8698

Leave a comment