Keycloak vulnerabilities

1 known vulnerability in Keycloak from Redhat.com. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Keycloak: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-3782Jan 13, 2023Redhat.comEPSS 6.17%

  keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and poten