| Package | Affected versions | Patched versions |
|---|---|---|
| keycloak | < 9.0.2 | 9.0.2 |
A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free