title: keycloak: open redirect in auth endpoint.
description: keycloak 18.0.0: open redirect in auth endpoint via the redirect_uri parameter.
problem types: URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
collection_url: keycloak
cpes: cpe:/a:redhat:red_hat_single_sign_on:7
defaultStatus: unaffected
product: Keycloak
vendor: Red Hat
x_redhatStatus: Not affected
versions:
version: 18.0.0, status: affected
}
metrics:
other: [
content: {'namespace': 'https://access.redhat.com/security/updates/classification/', 'value': 'Important'}
type: Red Hat severity rating
]