Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pw23-237p-qf6r

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

EPSS

Процентиль: 40%
0.00184
Низкий

Связанные уязвимости

CVSS3: 6.4
redhat
больше 5 лет назад

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

CVSS3: 6.4
nvd
больше 5 лет назад

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

CVSS3: 6.4
debian
больше 5 лет назад

A vulnerability was found in Keycloak before 9.0.2, where every Author ...

EPSS

Процентиль: 40%
0.00184
Низкий