Description
A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers (URIs) that use a wildcard. A successful attack may lead to the theft of an access token, resulting in information disclosure.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected products
- RedHat / build_of_keycloak
- RedHat / build_of_keycloak26.2 – 26.2
- RedHat / build_of_keycloak26.2.15 – 26.2.15
- RedHat / build_of_keycloak26.4 – 26.4
- RedHat / build_of_keycloak26.4.11 – 26.4.11
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:6475
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:6476
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:6477
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:6478
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2026-3872
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2445988
Updated 8m ago · 8 sources