https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:28:16.943064+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-8883 CVE-2024-8883 — Keycloak: vulnerable redirect uri validation results in open redirec 2026-10-05T18:28:16.960506+00:00

Affected: keycloak-services, Red Hat Build of Keycloak, Red Hat build of Keycloak 22, Red Hat build of Keycloak 24, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8 and 2 more

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.