Vulnerability · Published Jan 11, 2023 · Assigned by redhat
CVE-2022-3782
Critical 9.1
In plain English
A critical-severity path traversal in Keycloak from redhat.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 6.0% (higher than 93% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and potentially sensitive information within the domain or possibly conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.keycloak:keycloak-parent | 20.0.2 | GHSA-g8q8-fggx-9r3q |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| redhat.com | Keycloak | 20.0.2 – before 20.0.2 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N