Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-12789 EUVD-2025-38190GHSA-phcq-jxj6-jpjq

Rhsso: open redirect

Published Nov 6, 2025 · Updated Nov 7, 2025 · Assigned by redhat

Description

A flaw was found in Red Hat Single Sign-On. This issue is an Open Redirect vulnerability that occurs during the logout process. The redirect_uri parameter associated with the openid-connect logout protocol does not properly validate the provided URL.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Single Sign-On 7 — —

References