CVE-2024-8883
Last modified
CVE-2024-8883 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.. EPSS estimates a 1.96% chance of exploitation in the next 30 days.
Description
A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Build Of Keycloak | All versions |
| Redhat | Openshift Container Platform | 4.11 |
| Redhat | Openshift Container Platform | 4.12 |
| Redhat | Openshift Container Platform For Ibm Z | 4.9 |
| Redhat | Openshift Container Platform For Ibm Z | 4.10 |
| Redhat | Openshift Container Platform For Linuxone | 4.9 |
| Redhat | Openshift Container Platform For Linuxone | 4.10 |
| Redhat | Openshift Container Platform For Power | 4.9 |
| Redhat | Openshift Container Platform For Power | 4.10 |
| Redhat | Single Sign-On | All versions |
| Redhat | Single Sign-On | 7.6 |
References
- https://access.redhat.com/errata/RHSA-2024:6878Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:6879Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:6880Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:6882Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:6886Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:6887Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:6888Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:6889Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:6890Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-8883Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2312511Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-8883?
How severe is CVE-2024-8883?
How do I fix CVE-2024-8883?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-8876A vulnerability, which was classified as problematic, has be…7.5
- CVE-2024-8877Improper neutralization of special elements results in a SQL…9.8
- CVE-2024-8878The password recovery mechanism for the forgotten password i…9.8
- CVE-2024-8880A vulnerability classified as critical has been found in pla…9.8
- CVE-2024-8881A post-authentication command injection vulnerability in the…6.8
- CVE-2024-8882A buffer overflow vulnerability in the CGI program in the Zy…4.5
- CVE-2024-8884CWE-200: Exposure of Sensitive Information to an Unauthorize…9.8
- CVE-2024-8885A local privilege escalation vulnerability in Sophos Interce…8.8
- CVE-2024-8887CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affec…8.6
- CVE-2024-8888An attacker with access to the network where CIRCUTOR Q-SMT …7.5
- CVE-2024-8889Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, whi…9.1
- CVE-2024-8890An attacker with access to the network where the CIRCUTOR Q-…8.8
Are you affected by CVE-2024-8883?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST