Omegapoint Security Blog

securityblog.omegapoint.se

At Omegapoint we are strong believers in sharing our knowledge. On this site we have gathered blog posts and articles that represent our passion for cybersecurity and secure application development.

Popular posts: 1
Total points: 108
HN comments: 19
Rank: #9,468 company

Visit securityblog.omegapoint.se → RSS feedOn Hacker News Jan 2024 – Jan 2024

Security & Privacy 1 Software Engineering 1

Most points Most discussed Most cited Newest

Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens

2024108 points19 comments Security & Privacy details

CVE-2023-6927 Keycloak vulnerability allows bypassing redirect URI validation which can be used as a vector for stealing authorization codes, access tokens and be used to redirect victims to arbitrary hosts.