Описание
A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.
Отчет
CodeReady Studio is no longer supported. Therefore, this flaw will not be addressed in CodeReady Studio. Please see https://developers.redhat.com/articles/2022/04/18/announcement-red-hat-codeready-studio-reaches-end-life for more information.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat AMQ Broker 7 | keycloak-adapter-core | Not affected | ||
| Red Hat build of Quarkus | keycloak-adapter-core | Not affected | ||
| Red Hat CodeReady Studio 12 | keycloak-adapter-core | Out of support scope | ||
| Red Hat Decision Manager 7 | keycloak-adapter-core | Not affected | ||
| Red Hat Fuse 7 | keycloak-adapter-core | Not affected | ||
| Red Hat Fuse 7 | keycloak-core | Not affected | ||
| Red Hat OpenShift Container Platform 3.11 | keycloak-adapter-core | Out of support scope | ||
| Red Hat Process Automation 7 | keycloak-adapter-core | Not affected | ||
| Red Hat Satellite 6 | keycloak-adapter-core | Not affected | ||
| Red Hat Single Sign-On 7 | keycloak-js-adapter | Affected |
Показывать по
Дополнительная информация
Статус:
EPSS
6.8 Medium
CVSS3
Связанные уязвимости
A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.
A flaw was found in the Keycloak Node.js Adapter. This flaw allows an ...
keycloak-connect contains Open redirect vulnerability in the Node.js adapter
EPSS
6.8 Medium
CVSS3