Riskcovery

CVE-2024-1132

Keycloak: path transversal in redirection validation

State
Published
Severity
8.1 High
Published
Apr 17, 2024
Updated
Aug 4, 2026
Reserved
Jan 31, 2024

Read the record on cve.org

Description

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Nredhat

Weaknesses

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

ProductVersions
keycloak
  • 21.1.0 to before 22.0.10Affected
  • 23.0.0 to before 24.0.3Affected
Migration Toolkit for Runtimes 1 on RHEL 8Red Hat
  • 1.2-23 and laterNot affected
Migration Toolkit for Runtimes 1 on RHEL 8Red Hat
  • 1.2-15 and laterNot affected
Migration Toolkit for Runtimes 1 on RHEL 8Red Hat
  • 1.2-16 and laterNot affected
Migration Toolkit for Runtimes 1 on RHEL 8Red Hat
  • 1.2-14 and laterNot affected
MTA-6.2-RHEL-9Red Hat
  • 6.2.3-2 and laterNot affected
Red Hat AMQ Broker 7Red Hat
    Red Hat AMQ Broker 7Red Hat
      Red Hat AMQ Broker 7Red Hat
        Red Hat build of Keycloak 22Red Hat
        • 22.0.10-1 and laterNot affected
        Red Hat build of Keycloak 22Red Hat
        • 22-13 and laterNot affected
        Red Hat build of Keycloak 22Red Hat
        • 22-16 and laterNot affected
        Red Hat build of Keycloak 22.0.10Red Hat
          Red Hat Single Sign-On 7.6 for RHEL 7Red Hat
          • 0:18.0.13-1.redhat_00001.1.el7sso and laterNot affected
          Red Hat Single Sign-On 7.6 for RHEL 8Red Hat
          • 0:18.0.13-1.redhat_00001.1.el8sso and laterNot affected
          Red Hat Single Sign-On 7.6 for RHEL 9Red Hat
          • 0:18.0.13-1.redhat_00001.1.el9sso and laterNot affected
          RHEL-8 based Middleware ContainersRed Hat
          • 7.6-46 and laterNot affected
          RHSSO 7.6.8Red Hat
            Red Hat build of Apicurio Registry 2Red Hat
              Red Hat build of QuarkusRed Hat
                Red Hat build of QuarkusRed Hat
                  Red Hat Data Grid 8Red Hat
                    Red Hat Decision Manager 7Red Hat
                      Red Hat Fuse 7Red Hat
                        Red Hat JBoss Data Grid 7Red Hat
                          Red Hat JBoss Enterprise Application Platform 6Red Hat
                            Red Hat JBoss Enterprise Application Platform 7Red Hat
                              Red Hat Process Automation 7Red Hat

                                References

                                Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.