CVE-2022-2237CWE-601

A flaw was found in the Keycloak Node.js Adapter

Medium · published March 27, 2023

CVSS v3.1
6.1
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2023-03-27T00:00Z
EPSS history
Timeline
  • 27 MAR 00:00Z
    A flaw was found in the Keycloak Node.js Adapter
    cvelistv5