Description
A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of Keycloak Gatekeeper (Louketo): 6.0.1, 7.0.0
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1770276
https://issues.redhat.com/browse/KEYCLOAK-11318
Related Vulnerabilities
CVE-2018-11695 Vulnerability in npm package node-sass
CVE-2020-2211 Vulnerability in maven package com.elasticbox.jenkins-ci.plugins:kubernetes-ci
CVE-2023-40014 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts
CVE-2023-37460 Vulnerability in maven package org.codehaus.plexus:plexus-archiver
CVE-2023-46731 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui