PT-2023-12689 · Red Hat · Keycloak Node.Js Adapter

Pedro Sampaio

·

CVE-2022-2237

·

Publicado

2023-03-02

·

Atualizado

2025-02-24

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Keycloak Node.js Adapter (affected versions not specified)
Description A flaw was found in the Keycloak Node.js Adapter, allowing an attacker to benefit from an Open Redirect vulnerability in the checkSso function. This issue is also present when forwarding requests to Keycloak using the checkSSO function with the query parameter prompt=none.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Open Redirect

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2022-2237
GHSA-59FQ-727J-HM3F

Produtos afetados

Keycloak Node.Js Adapter