Log in Start free

Vulnerability · Published Sep 19, 2024 · Assigned by redhat

CVE-2024-8883Keycloak: vulnerable redirect uri validation results in open redirec

Medium 6.1

In plain English

A medium-severity open redirect in keycloak-services. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)2.1%top 18.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Nuclei

Official description

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Mavenorg.keycloak:keycloak-services22.0.13GHSA-w8gr-xwp4-r9f7
Mavenorg.keycloak:keycloak-services24.0.8GHSA-w8gr-xwp4-r9f7
Mavenorg.keycloak:keycloak-services25.0.6GHSA-w8gr-xwp4-r9f7

Affected products (as reported)

VendorProductVersions
keycloak-services 0 – before 22.0.1223.0.0 – before 24.0.725.0.0 – before 25.0.5
Red Hat Red Hat Build of Keycloak see references
Red Hat Red Hat Build of Keycloak see references
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 24 see references
Red Hat Red Hat build of Keycloak 24 see references
Red Hat Red Hat build of Keycloak 24 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references
Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 see references

Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References