CVE-2022-2237

CVE-2022-2237 describes an Open Redirect in the Keycloak Node.js Adapter, exploitable via the checkSso flow (and checkSSO with prompt=none). Multiple connected sources corroborate the Open Redirect issue (GHSA advisory, OSV entries, CVE records, RHSA/RH listings). The PT-Security entry notes affe...

CVE-2022-2237

A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function...

@aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3), @aerogear/voyager-keycloak (>=0.3.0-SNAPSHOT1, <=0.9.1-dev.435.8d846ff.0) +114 more potentially affected by CVE-2022-2237 via keycloak-connect (>=3.1.0, <=20.0.5)

keycloak-connect NPM version =3.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.3.0-SNAPSHOT1, =0.5.2-dev1, =1.0.0-alpha.0, =5.1.2, =0.1.0, =1.0.0, =1.1.1, =1.5.1, =0.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2022-2237 Source advisory: MEND:CVE-2022-2237...

CVE-2022-2237

A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function...