Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
vulnrichmentRedhatVULNRICHMENT:CVE-2024-8883
HistorySep 19, 2024 - 3:48 p.m.

CVE-2024-8883 Keycloak: vulnerable redirect uri validation results in open redirec

2024-09-1915:48:28
CWE-601
redhat
github.com
2
keycloak misconfiguration
open redirect
session hijacking
cve-2024-8883

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

76.5%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

JSON

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a ‘Valid Redirect URI’ is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Related

osv 1
github 1
cve 1
wolfi 1
cvelist 1
nvd 1
redhatcve 1
nessus 3
redhat 9
osv
osv
Keycloak Open Redirect vulnerability
2024-09-19 18:30:52
github
github
Keycloak Open Redirect vulnerability
2024-09-19 18:30:52
cve
cve
CVE-2024-8883
2024-09-19 16:15:06
wolfi
wolfi
CVE-2024-8883 vulnerabilities
2024-09-29 09:21:20
cvelist
cvelist
CVE-2024-8883 Keycloak: vulnerable redirect uri validation results in open redirec
2024-09-19 15:48:28
nvd
nvd
CVE-2024-8883
2024-09-19 16:15:06
redhatcve
redhatcve
CVE-2024-8883
2024-09-19 15:45:27
nessus
nessus
RHEL 7 : Red Hat Single Sign-On 7.6.11 security update on RHEL 7 (Important) (RHSA-2024:6878)
2024-09-19 00:00:00
RHEL 9 : Red Hat Single Sign-On 7.6.11 security update on RHEL 9 (Important) (RHSA-2024:6880)
2024-09-19 00:00:00
RHEL 8 : Red Hat Single Sign-On 7.6.11 security update on RHEL 8 (Important) (RHSA-2024:6879)
2024-09-19 00:00:00
redhat
redhat
(RHSA-2024:6890) Important: Red Hat build of Keycloak 24.0.8 Update
2024-09-19 17:05:17
(RHSA-2024:6886) Important: Red Hat Single Sign-On 7.6.11 security update
2024-09-19 16:53:02
(RHSA-2024:6879) Important: Red Hat Single Sign-On 7.6.11 security update on RHEL 8
2024-09-19 16:39:24

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

76.5%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

JSON
Related for VULNRICHMENT:CVE-2024-8883
osv1github1cve1wolfi1cvelist1nvd1redhatcve1nessus3redhat9