İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 8.1

CVE-2024-1132: Build Of Keycloak: dizin geçişi

Yayın: · Güncelleme:

Açıklama (NVD)

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.

Özet bilgiler

Ürün
Redhat Build Of Keycloak
CVSS v3.1
8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS
%1,55 (yüzdelik 75)
CWE
CWE-22
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
redhat-build-of-keycloak———
redhat-jboss-middleware-text-only-advisories1.01.0—
redhat-keycloak21.1.0—22.0.10
redhat-keycloak23.0.0—24.0.3
redhat-migration-toolkit-for-applications1.01.0—
redhat-migration-toolkit-for-runtimes———
redhat-openshift-container-platform4.114.11—
redhat-openshift-container-platform4.124.12—
redhat-openshift-container-platform-for-ibm-z4.94.9—
redhat-openshift-container-platform-for-ibm-z4.104.10—
redhat-openshift-container-platform-for-linuxone4.94.9—
redhat-openshift-container-platform-for-linuxone4.104.10—
redhat-openshift-container-platform-for-power4.94.9—
redhat-openshift-container-platform-for-power4.104.10—
redhat-single-sign-on———
redhat-single-sign-on7.67.6—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları