Omegapoint Security Blog company blog
Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens
CVE-2023-6927 Keycloak vulnerability allows bypassing redirect URI validation which can be used as a vector for stealing authorization codes, access tokens and be used to redirect victims to arbitrary hosts.
- Points
- 108
- HN comments
- 19
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2024
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jan 12, 2024 | Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens by pontushanssen | 108 | 19 |
