Lucene search
GoogleOSV:GHSA-3QH2-MCCC-Q5M6HistoryMay 13, 2022 - 1:34 a.m.
Keycloak Open Redirect
2022-05-1301:34:29
Google
osv.dev
17
jboss keycloak
flaw
open redirection
EPSS
0.001
Percentile
46.6%
A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack
Related
cve
cve
CVE-2018-14658
2018-11-13 19:29:00
nvd
nvd
CVE-2018-14658
2018-11-13 19:29:00
prion
prion
Design/Logic Flaw
2018-11-13 19:29:00
osv
osv
CVE-2018-14658
2018-11-13 19:29:00
redhatcve
redhatcve
CVE-2018-14658
2019-10-08 16:15:29
veracode
veracode
Open Redirection
2018-11-14 01:54:08
cvelist
cvelist
CVE-2018-14658
2018-11-13 19:00:00
github
github
Keycloak Open Redirect
2022-05-13 01:34:29
nessus
nessus
RHEL 6 : Red Hat Single Sign-On 7.2.5 on RHEL 6 (RHSA-2018:3592)
2018-11-14 00:00:00
RHEL 7 : Red Hat Single Sign-On 7.2.5 on RHEL 7 (RHSA-2018:3593)
2018-11-14 00:00:00
redhat
redhat