CGA-4mpx-5vpw-hg98

Published

Last updated

Package

keycloak-fips

Latest Update

Fixed

Fixed Version

24.0.3-r0

Aliases

Severity

7.1

High

CVSS V3

Keycloak path traversal vulnerability in the redirect validation

An issue was found in the redirect_uri validation logic that allows for a bypass of otherwise explicitly allowed hosts.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™