Red Hat build of Keycloak 22.0.7 vulnerabilities

1 known vulnerability in Red Hat build of Keycloak 22.0.7 from Red Hat. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Red Hat build of Keycloak 22: URL Redirection to Untrusted Site

  CVE-2023-6291Jan 26, 2024Red Hat

  A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users