Red Hat Security AdvisoryRHSA-2021:0320
Red Hat Single Sign-On 7.4.5 security update on RHEL 8
Released 2021-02-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Single Sign-On 7.4 for RHEL 8 rh-sso7-keycloak-9.0.11-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-9.0.11-1.redhat_00001.1.el8sso
Fixes 1 record
Priority MEDIUM 61
A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.69724 · Published 2020-12-15 · Fixed in 13.0.0 CWE-918
