GitHub Advisoryadvisory · Maven

GHSA-72vp-xfrc-42xm Keycloak path traversal vulnerability in redirection validation

HIGH Published 2024-04-17 Modified 2024-07-30 Official page ↗
Aliases
CVE-2024-1132
Ecosystem
Maven
Packages
org.keycloak:keycloak-services
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-22
Reviewed
2024-04-17

Affected packages

• Maven org.keycloak:keycloak-services: < 22.0.10 → fixed in 22.0.10 • Maven org.keycloak:keycloak-services: >= 23.0.0, < 24.0.3 → fixed in 24.0.3

Description

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and potentially sensitive information within the domain or possibly conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field. Acknowledgements: Special thanks to Axel Flamcourt for reporting this issue and helping us improve our project.

Related

Alias · CVE (1)

  • CVE-2024-1132 A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References