redhat build of keycloak, redhat jboss middleware text-only advisories, redhat keycloak +7 lainnya
CVSS 8.1 · High EPSS 1,6%
Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada redhat build of keycloak, redhat jboss middleware text-only advisories +8 lainnya. Skor CVSS 3.1 8.1 (High) menurut redhat.com.
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| redhat | build of keycloak | Semua versi |
| redhat | jboss middleware text-only advisories | Versi 1.0 |
| redhat | keycloak | Versi 21.1.0 hingga sebelum 22.0.10 |
| redhat | keycloak | Versi 23.0.0 hingga sebelum 24.0.3 |
| redhat | migration toolkit for applications | Versi 1.0 |
| redhat | migration toolkit for runtimes | Semua versi |
| redhat | openshift container platform | Versi 4.11 |
| redhat | openshift container platform | Versi 4.12 |
| redhat | openshift container platform for ibm z | Versi 4.9 |
| redhat | openshift container platform for ibm z | Versi 4.10 |
| redhat | openshift container platform for linuxone | Versi 4.9 |
| redhat | openshift container platform for linuxone | Versi 4.10 |
| redhat | openshift container platform for power | Versi 4.9 |
| redhat | openshift container platform for power | Versi 4.10 |
| redhat | single sign-on | Semua versi |
| redhat | single sign-on | Versi 7.6 |