CVE-2024-8883
1 advisory.
Maven/org.keycloak:keycloak-services CVE-2024-8883: medium 6.1, EPSS 2.11%
Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect
Action: Upgrade org.keycloak:keycloak-services to 22.0.13 (22.x), 24.0.8 (24.x) or 25.0.6 (25.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 22.0.13 | - |
| 23.0.0 | 24.0.8 | - |
| 25.0.0 | 25.0.6 | - |
Fixed versions
| 22.0.13 | 24.0.8 | 25.0.6 |
Sources
- osv: GHSA-w8gr-xwp4-r9f7
- https://github.com/keycloak/keycloak/security/advisories/GHSA-w8gr-xwp4-r9f7
- https://nvd.nist.gov/vuln/detail/CVE-2024-8883
- https://github.com/keycloak/keycloak/releases/tag/25.0.6
- https://github.com/keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/protocol/oidc/utils/RedirectUtils.java
- https://github.com/keycloak/keycloak
- https://bugzilla.redhat.com/show_bug.cgi?id=2312511
- https://access.redhat.com/security/cve/CVE-2024-8883
- https://access.redhat.com/errata/RHSA-2024:8826
- https://access.redhat.com/errata/RHSA-2024:8824
- https://access.redhat.com/errata/RHSA-2024:8823
- https://access.redhat.com/errata/RHSA-2024:6890
- https://access.redhat.com/errata/RHSA-2024:6889
- https://access.redhat.com/errata/RHSA-2024:6888
- https://access.redhat.com/errata/RHSA-2024:6887
- https://access.redhat.com/errata/RHSA-2024:6886
- https://access.redhat.com/errata/RHSA-2024:6882
- https://access.redhat.com/errata/RHSA-2024:6880
- https://access.redhat.com/errata/RHSA-2024:6879
- https://access.redhat.com/errata/RHSA-2024:6878
- https://access.redhat.com/errata/RHSA-2024:10386
- https://access.redhat.com/errata/RHSA-2024:10385
CVE-2024-8883 · published · modified · JSON