Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2022-3782
keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and potentially sensitive information within the domain or possibly conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field.
| Software | From | Fixed in |
|---|---|---|
| redhat / keycloak | 20.0.2 | 20.0.2.x |
org.keycloak / keycloak-parent
|
- | 20.0.2 |