Skip to content
OpenAdvisories

Vendor

redhat.com

6 known vulnerabilities.

Products

Keycloak 4 Wildfly-elytron 1 RHACM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2022-3782 Public exploit

    Keycloak vulnerable to path traversal via double URL encoding

    keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and pote…

    redhat.com Keycloak org.keycloak:keycloak-parent Maven