CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-8883

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.045

EPSS Ranking 88.5%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2024-8883

Redhat » Build Of Keycloak » Version: N/A

cpe:2.3:a:redhat:build_of_keycloak:-
Redhat » Openshift Container Platform » Version: 4.11

cpe:2.3:a:redhat:openshift_container_platform:4.11
Redhat » Openshift Container Platform » Version: 4.12

cpe:2.3:a:redhat:openshift_container_platform:4.12
Redhat » Openshift Container Platform For Ibm Z » Version: 4.10

cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.10
Redhat » Openshift Container Platform For Ibm Z » Version: 4.9

cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.9
Redhat » Openshift Container Platform For Linuxone » Version: 4.10

cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.10
Redhat » Openshift Container Platform For Linuxone » Version: 4.9

cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.9
Redhat » Openshift Container Platform For Power » Version: 4.10

cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10
Redhat » Openshift Container Platform For Power » Version: 4.9

cpe:2.3:a:redhat:openshift_container_platform_for_power:4.9
Redhat » Single Sign-On » Version: N/A

cpe:2.3:a:redhat:single_sign-on:-
Redhat » Single Sign-On » Version: 7.6

cpe:2.3:a:redhat:single_sign-on:7.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-8883

Products

Pricing

Contact Us