A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
References
Configurations
No configuration.
History
17 Apr 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Apr 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-17 14:15
Updated : 2024-04-17 16:15
NVD link : CVE-2024-1132
Mitre link : CVE-2024-1132
CVE.ORG link : CVE-2024-1132
JSON object : View
Products Affected
No product.
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')