Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pw23-237p-qf6r

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

EPSS

Процентиль: 53%
0.00801
Низкий

Связанные уязвимости

CVSS3: 6.4
redhat
больше 6 лет назад

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

CVSS3: 6.4
nvd
около 6 лет назад

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

CVSS3: 6.4
debian
около 6 лет назад

A vulnerability was found in Keycloak before 9.0.2, where every Author ...

EPSS

Процентиль: 53%
0.00801
Низкий