Most recent entries from all

EUVD-2026-344037

fkie_cve-2024-8883

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

GHSA-w8gr-xwp4-r9f7 — Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect

Affected: Maven: org.keycloak:keycloak-services

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost/ or http://127.0.0.1/, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

RHSA-2024:10385 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0 update

Keycloak: Vulnerable Redirect URI Validation Results in Open Redirec

WID-SEC-W-2024-2185 — Keycloak: Schwachstelle ermöglicht Darstellen falscher Informationen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um falsche Informationen darzustellen.