CVE-2024-8883 Scanner
CVE-2024-8883 scanner - Open Redirect vulnerability in Keycloak
Used 3.4k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-8883
6.1
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
red hat build of keycloakred hat build of keycloak 22red hat build of keycloak 24red hat jboss enterprise application platform 8red hat jboss enterprise application platform 8.0 for rhel 8red hat jboss enterprise application platform 8.0 for rhel 9
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: red hat build of keycloak
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →