StackRadar

CVE-2024-7318

Medium

Advisory

Published 14 Oct 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
18
deployed by those charts
Fix available
3 of 3
affected packages

Keycloak-core: one time passcode (otp) is valid longer than expiration timeseverity

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 18 images.

Affected packageAffected versionsFixed inImages
keycloak-coremaven3.4.0.Final, 12.0.4, 13.0.1, 14.0.0+13 more24.0.7, 25.0.418
keycloakbitnami24.0.4-124.0.71
Keycloakbitnami24.0.4-124.0.71
OSV records
BIT-keycloak-2024-7318GHSA-xmmm-jw76-q7vg

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-core@17.0.1
24.0.7

Open the chart page →

7,713
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
keycloak-core@3.4.0.Final
24.0.7

Open the chart page →

10,732
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
keycloak-core@23.0.3
24.0.7

Open the chart page →

4,406
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
keycloak-core@20.0.5
24.0.7

Open the chart page →

37,373
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
keycloak-core@13.0.1
24.0.7

Open the chart page →

3,958
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-core@17.0.1
24.0.7

Open the chart page →

7,713
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
keycloak-core@19.0.3
24.0.7

Open the chart page →

13,352
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
keycloak-core@24.0.3
24.0.7

Open the chart page →

2,381
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
keycloak-core@23.0.7
24.0.7

Open the chart page →

13,936
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-core@20.0.5
24.0.7

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-core@20.0.5
24.0.7

Open the chart page →

6,915
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
keycloak-core@18.0.2
24.0.7

Open the chart page →

34,754
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
keycloak-core@25.0.1
25.0.4

Open the chart page →

3,334
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
keycloak@24.0.4-1
Keycloak@24.0.4-1
keycloak-core@24.0.4
24.0.7
24.0.7
24.0.7

Open the chart page →

15,369
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
keycloak-core@19.0.1
24.0.7

Open the chart page →

5,875
apicurioone-acre-fundVerified publisher2.3.01 of 5See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
keycloak-core@22.0.3
24.0.7

Open the chart page →

18,667
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
keycloak-core@20.0.1
24.0.7

Open the chart page →

6,443
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
keycloak-core@12.0.4
24.0.7

Open the chart page →

12,455
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
keycloak-core@14.0.0
24.0.7

Open the chart page →

28,605
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-7318.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
keycloak-core@20.0.3
24.0.7

Open the chart page →

6,016

Container images carrying it

18 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-core@20.0.5
24.0.7
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-core@17.0.1
24.0.7
2
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
keycloak-core@25.0.1
25.0.4
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
keycloak-core@12.0.4
24.0.7
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
keycloak-core@22.0.3
24.0.7
1
assistiot/identity-manager_kc:latest0df4b4fa899a
keycloak-core@19.0.3
24.0.7
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
keycloak-core@20.0.5
24.0.7
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
keycloak@24.0.4-1
Keycloak@24.0.4-1
keycloak-core@24.0.4
24.0.7
24.0.7
24.0.7
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
keycloak-core@18.0.2
24.0.7
1
microcks/microcks:0.8.0e3a3e0c67b09
keycloak-core@3.4.0.Final
24.0.7
1
remche/shinyproxy:2.6.18bcda8a04d3b
keycloak-core@13.0.1
24.0.7
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
keycloak-core@19.0.1
24.0.7
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
keycloak-core@23.0.7
24.0.7
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
keycloak-core@14.0.0
24.0.7
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
keycloak-core@24.0.3
24.0.7
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
keycloak-core@23.0.3
24.0.7
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
keycloak-core@20.0.1
24.0.7
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
keycloak-core@20.0.3
24.0.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.