5.8
CVSSv2

CVE-2018-14658

Published: 13/11/2018 Updated: 09/10/2019
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

redhat keycloak 3.2.1

Vendor Advisories

Synopsis Moderate: Red Hat Single Sign-On 725 security and bug fix update Type/Severity Security Advisory: Moderate Topic A security update is now available for Red Hat Single Sign-On 72 from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Moderate A Com ...
Synopsis Moderate: Red Hat Single Sign-On 725 on RHEL 6 security and bug fix update Type/Severity Security Advisory: Moderate Topic New Red Hat Single Sign-On 725 packages are now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moder ...
Synopsis Moderate: Red Hat Single Sign-On 725 on RHEL 7 security and bug fix update Type/Severity Security Advisory: Moderate Topic New Red Hat Single Sign-On 725 packages are now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moder ...
A flaw was found in JBOSS Keycloak 321Final The Redirect URL for both Login and Logout are not normalized in orgkeycloakprotocoloidcutilsRedirectUtils before the redirect url is verified This can lead to an Open Redirection attack ...