Homepage
About Snyk

org.keycloak:keycloak-common@24.0.0 vulnerabilities

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.keycloak:keycloak-common package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Path Traversal

org.keycloak:keycloak-common is an Open Source Identity and Access Management For Modern Applications and Services.

Affected versions of this package are vulnerable to Path Traversal due to improper URL validation in the redirection process. An attacker can construct a malicious request to bypass validation and access other URLs and potentially sensitive information within the domain.

Note: This flaw is particularly concerning for any client that utilizes a wildcard in the Valid Redirect URIs field.

How to fix Path Traversal?

Upgrade org.keycloak:keycloak-common to version 24.0.3 or higher.

[21.1.0,24.0.3)
Go back to all versions of this package