Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass

Description A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with manage-client permission or access to client registration endpoints, could bypass client Uniform Resource Identifier URI validation. This is achieved by registering a malicious clie...