Strix
26.1K

CVE-2024-1132

HIGHCVSS 8.1/10EPSS 1.55%

Last modified

CVE-2024-1132 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. EPSS estimates a 1.55% chance of exploitation in the next 30 days.

Description

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.

Metrics

CVSS 3.1
8.1/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS Probability
1.55%

72.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
RedhatBuild Of KeycloakAll versions
RedhatJboss Middleware Text-Only Advisories1.0
RedhatKeycloak>= 21.1.0, < 22.0.10
RedhatKeycloak>= 23.0.0, < 24.0.3
RedhatMigration Toolkit For Applications1.0
RedhatMigration Toolkit For RuntimesAll versions
RedhatOpenshift Container Platform4.11
RedhatOpenshift Container Platform4.12
RedhatOpenshift Container Platform For Ibm Z4.9
RedhatOpenshift Container Platform For Ibm Z4.10
RedhatOpenshift Container Platform For Linuxone4.9
RedhatOpenshift Container Platform For Linuxone4.10
RedhatOpenshift Container Platform For Power4.9
RedhatOpenshift Container Platform For Power4.10
RedhatSingle Sign-OnAll versions
RedhatSingle Sign-On7.6

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2024-1132?
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
How severe is CVE-2024-1132?
CVE-2024-1132 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 1.55% probability of exploitation in the next 30 days.
How do I fix CVE-2024-1132?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-1132?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST