CVE-2025-12789: Rhsso: open redirect
Published Nov 6, 2025
·Updated
A flaw was found in Red Hat Single Sign-On. This issue is an Open Redirect vulnerability that occurs during the logout process. The redirecturi parameter associated with the openid-connect logout protocol does not properly validate the provided URL.
Affected Software
1 affected component
Red Hat Single Sign-On
Event History
Nov 6, 2025
Data Sourced
via Red Hat·02:30 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·11:20 PM
Data Sourced
via MITRE·11:20 PM
DescriptionSeverityWeakness
Nov 7, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-12789?
The severity of CVE-2025-12789 has not been publicly rated, but it is categorized as an Open Redirect vulnerability.
2
How do I fix CVE-2025-12789?
To mitigate CVE-2025-12789, ensure proper validation of the redirect_uri parameter during the logout process.
3
What software is affected by CVE-2025-12789?
CVE-2025-12789 affects Red Hat Single Sign-On.
4
What type of vulnerability is CVE-2025-12789?
CVE-2025-12789 is classified as an Open Redirect vulnerability.
5
What happens if CVE-2025-12789 is exploited?
If exploited, CVE-2025-12789 can lead to phishing attacks or unauthorized redirects during the logout process.