[Snyk] Fix for 8 vulnerabilities

[vzakharchenko]

Snyk has created this PR to fix 8 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• keycloak-plugins/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	URL Redirection to Untrusted Site ('Open Redirect') SNYK-JAVA-ORGKEYCLOAK-8061810	666	org.keycloak:keycloak-authz-policy-common: 21.0.0 -> 25.0.6 org.keycloak:keycloak-kerberos-federation: 21.0.0 -> 25.0.6 org.keycloak:keycloak-ldap-federation: 21.0.0 -> 25.0.6 org.keycloak:keycloak-model-infinispan: 21.0.0 -> 25.0.6 org.keycloak:keycloak-model-jpa: 21.0.0 -> 25.0.6 org.keycloak:keycloak-server-spi-private: 21.0.0 -> 25.0.6 org.keycloak:keycloak-services: 21.0.0 -> 25.0.6 Major version upgrade No Known Exploit
	URL Redirection to Untrusted Site ('Open Redirect') SNYK-JAVA-ORGKEYCLOAK-8061811	666	org.keycloak:keycloak-ldap-federation: 21.0.0 -> 25.0.6 org.keycloak:keycloak-model-jpa: 21.0.0 -> 25.0.6 org.keycloak:keycloak-services: 21.0.0 -> 25.0.6 Major version upgrade No Known Exploit
	Arbitrary Code Execution SNYK-JAVA-ORGYAML-3152153	651	org.keycloak:keycloak-services: 21.0.0 -> 25.0.6 Major version upgrade Proof of Concept
	Improper Handling of Extra Values SNYK-JAVA-ORGKEYCLOAK-7926864	641	org.keycloak:keycloak-authz-client: 21.0.0 -> 25.0.6 org.keycloak:keycloak-ldap-federation: 21.0.0 -> 25.0.6 org.keycloak:keycloak-model-infinispan: 21.0.0 -> 25.0.6 org.keycloak:keycloak-model-jpa: 21.0.0 -> 25.0.6 org.keycloak:keycloak-server-spi: 21.0.0 -> 25.0.6 org.keycloak:keycloak-server-spi-private: 21.0.0 -> 25.0.6 org.keycloak:keycloak-services: 21.0.0 -> 25.0.6 Major version upgrade No Known Exploit
	Improper Verification of Cryptographic Signature SNYK-JAVA-ORGKEYCLOAK-8061829	551	org.keycloak:keycloak-services: 21.0.0 -> 25.0.6 Major version upgrade No Known Exploit
	Information Exposure SNYK-JAVA-COMMONSCODEC-561518	399	org.keycloak:keycloak-services: 21.0.0 -> 25.0.6 Major version upgrade No Known Exploit
	Cross-Site Request Forgery (CSRF) SNYK-JAVA-ORGKEYCLOAK-7247314	399	org.keycloak:keycloak-ldap-federation: 21.0.0 -> 25.0.6 org.keycloak:keycloak-model-infinispan: 21.0.0 -> 25.0.6 org.keycloak:keycloak-model-jpa: 21.0.0 -> 25.0.6 org.keycloak:keycloak-services: 21.0.0 -> 25.0.6 Major version upgrade No Known Exploit
	Cross-Site Request Forgery (CSRF) SNYK-JAVA-ORGKEYCLOAK-7247337	399	org.keycloak:keycloak-ldap-federation: 21.0.0 -> 25.0.6 org.keycloak:keycloak-model-jpa: 21.0.0 -> 25.0.6 Major version upgrade No Known Exploit

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 URL Redirection to Untrusted Site ('Open Redirect')
🦉 Cross-Site Request Forgery (CSRF)
🦉 Arbitrary Code Execution

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"org.keycloak:keycloak-authz-client","from":"21.0.0","to":"25.0.6"},{"name":"org.keycloak:keycloak-authz-policy-common","from":"21.0.0","to":"25.0.6"},{"name":"org.keycloak:keycloak-kerberos-federation","from":"21.0.0","to":"25.0.6"},{"name":"org.keycloak:keycloak-ldap-federation","from":"21.0.0","to":"25.0.6"},{"name":"org.keycloak:keycloak-model-infinispan","from":"21.0.0","to":"25.0.6"},{"name":"org.keycloak:keycloak-model-jpa","from":"21.0.0","to":"25.0.6"},{"name":"org.keycloak:keycloak-server-spi","from":"21.0.0","to":"25.0.6"},{"name":"org.keycloak:keycloak-server-spi-private","from":"21.0.0","to":"25.0.6"},{"name":"org.keycloak:keycloak-services","from":"21.0.0","to":"25.0.6"}],"env":"prod","issuesToFix":[{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-COMMONSCODEC-561518","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Information Exposure"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061811","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7247337","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Cross-Site Request Forgery (CSRF)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061811","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7247337","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Cross-Site Request Forgery (CSRF)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061811","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7926864","priority_score":641,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.1","score":355},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Handling of Extra Values"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7926864","priority_score":641,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.1","score":355},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Handling of Extra Values"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7926864","priority_score":641,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.1","score":355},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Handling of Extra Values"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7926864","priority_score":641,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.1","score":355},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Handling of Extra Values"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7926864","priority_score":641,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.1","score":355},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Handling of Extra Values"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7926864","priority_score":641,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.1","score":355},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Handling of Extra Values"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7926864","priority_score":641,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.1","score":355},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Handling of Extra Values"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7247314","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Cross-Site Request Forgery (CSRF)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7247314","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Cross-Site Request Forgery (CSRF)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7247314","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Cross-Site Request Forgery (CSRF)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-7247314","priority_score":399,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Cross-Site Request Forgery (CSRF)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061810","priority_score":666,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.6","score":380},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"URL Redirection to Untrusted Site ('Open Redirect')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-JAVA-ORGKEYCLOAK-8061829","priority_score":551,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Improper Verification of Cryptographic Signature"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JAVA-ORGYAML-3152153","priority_score":651,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.6","score":330},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Arbitrary Code Execution"}],"prId":"bea60573-cd60-4bd9-9f1c-2b0f9dedd3e8","prPublicId":"bea60573-cd60-4bd9-9f1c-2b0f9dedd3e8","packageManager":"maven","priorityScoreList":[399,666,399,641,666,399,551,651],"projectPublicId":"8f277a9c-e301-4878-8365-76b77fede56a","projectUrl":"https://app.snyk.io/org/vzakharchenko-github-marketplace/project/8f277a9c-e301-4878-8365-76b77fede56a?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JAVA-COMMONSCODEC-561518","SNYK-JAVA-ORGKEYCLOAK-7247314","SNYK-JAVA-ORGKEYCLOAK-7247337","SNYK-JAVA-ORGKEYCLOAK-7926864","SNYK-JAVA-ORGKEYCLOAK-8061810","SNYK-JAVA-ORGKEYCLOAK-8061811","SNYK-JAVA-ORGKEYCLOAK-8061829","SNYK-JAVA-ORGYAML-3152153"],"vulns":["SNYK-JAVA-COMMONSCODEC-561518","SNYK-JAVA-ORGKEYCLOAK-8061811","SNYK-JAVA-ORGKEYCLOAK-7247337","SNYK-JAVA-ORGKEYCLOAK-7926864","SNYK-JAVA-ORGKEYCLOAK-8061810","SNYK-JAVA-ORGKEYCLOAK-7247314","SNYK-JAVA-ORGKEYCLOAK-8061829","SNYK-JAVA-ORGYAML-3152153"],"patch":[],"isBreakingChange":true,"remediationStrategy":"vuln"}'

[codeclimate]

Code Climate has analyzed commit f6706ac and detected 0 issues on this pull request.

View more on Code Climate.