REDHAT-BUG-2092434: High severity keycloak vulnerability
Published Jun 1, 2022
·Updated
An open redirection vulnerability (open redirect) exists in keycloak auth endpoint. URL can be mentioned as the value of redirecturi query parameter and it successfully redirects to it.
References:
https://github.com/syedsohaibkarim/OpenRedirect-Keycloak18.0.0
Affected Software
1 affected component
Red Hat Keycloak
Event History
Jun 1, 2022
Data Sourced
02:20 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2092434?
The severity of REDHAT-BUG-2092434 is high due to the potential for exploitation via open redirection.
2
How do I fix REDHAT-BUG-2092434?
To mitigate REDHAT-BUG-2092434, ensure that your Keycloak configuration properly validates the redirect_uri parameter.
3
What software is affected by REDHAT-BUG-2092434?
REDHAT-BUG-2092434 affects Red Hat Build of Keycloak.
4
What type of vulnerability is REDHAT-BUG-2092434?
REDHAT-BUG-2092434 is classified as an open redirection vulnerability.
5
Can REDHAT-BUG-2092434 lead to further attacks?
Yes, exploitation of REDHAT-BUG-2092434 can lead users to malicious sites, increasing the risk of phishing or other attacks.