Описание
keycloak-connect contains Open redirect vulnerability in the Node.js adapter
There is an Open Redirect vulnerability in the Node.js adapter when forwarding requests to Keycloak using checkSSO with query param prompt=none.
Пакеты
Наименование
keycloak-connect
npm
Затронутые версииВерсия исправления
< 21.0.1
21.0.1
Связанные уязвимости
CVSS3: 6.8
redhat
почти 3 года назад
A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.
CVSS3: 6.1
nvd
почти 3 года назад
A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.
CVSS3: 6.1
debian
почти 3 года назад
A flaw was found in the Keycloak Node.js Adapter. This flaw allows an ...