Description (CNA)
A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| [UNKNOWN] / keycloak | affected Versions before 9.0.2 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.