logo

Database

Lack of data validation In org.keycloak:keycloak-parent

Description

URL Redirection to Untrusted Site ('Open Redirect')

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2023-62912. NVD-2023-62913. OSV-2023-62914. GHSA-mpwq-j3xf-7m5w5. GCVE-2023-62916. access.redhat.com7. access.redhat.com8. access.redhat.com9. access.redhat.com10. access.redhat.com11. access.redhat.com12. access.redhat.com13. ACCESS-CVE-2023-6291

References

1. https://bugzilla.redhat.com/show_bug.cgi?id=22514072. https://github.com/keycloak/keycloak/security/advisories/GHSA-mpwq-j3xf-7m5w3. https://github.com/keycloak/keycloak/commit/b2e91105315ccf2c1df549b4f6c5948322cbfd1b

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.