CVE-2024-8883— Keycloak: vulnerable redirect uri validation results in open redirec
Quick assessment
Affected
CVE-2024-8883
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Red Hat Keycloak是美国红帽（Red Hat）公司的一套为现代应用和服务提供身份验证和管理功能的软件。 Red Hat Keycloak 25.0.6之前版本存在输入验证错误漏洞，该漏洞源于存在配置错误，允许攻击者将用户重定向到任意URL，从而使授权码等敏感信息暴露给攻击者。
Public Exploits 1
Nuclei · 1
CVE-2024-8883.yaml [template]
Possible ATT&CK Techniques 3 AI
T1078 · Valid Accounts T1539 · Steal Web Session Cookie T1557 · Adversary-in-the-MiddleAffected Version Matrix 96
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| None | None | < 22.0.12 |
affected |
23.0.0< 24.0.7 |
affected | ||
25.0.0< 25.0.5 |
affected | ||
| Red Hat | Red Hat Build of Keycloak | any |
unaffected |
any |
unaffected | ||
| Red Hat | Red Hat build of Keycloak 22 | 22.0.13-1< * |
unaffected |
22-18< * |
unaffected | ||
22-21< * |
unaffected | ||
| Red Hat | Red Hat build of Keycloak 24 | 24.0.8-1< * |
unaffected |
24-17< * |
unaffected | ||
24-17< * |
unaffected | ||
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | any |
unaffected |
any |
unaffected | ||
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:800.4.1-1.GA_redhat_00001.1.el8eap< * |
unaffected |
0:8.0.4-3.GA_redhat_00007.1.el8eap< * |
unaffected | ||
0:2.33.0-1.redhat_00015.1.el8eap< * |
unaffected | ||
1:2.0.0-2.redhat_00005.1.el8eap< * |
unaffected | ||
0:1.8.0-2.redhat_00001.1.el8eap< * |
unaffected | ||
0:2.2.0-2.redhat_00001.1.el8eap< * |
unaffected | ||
0:1.16.1-2.redhat_00007.1.el8eap< * |
unaffected | ||
0:3.2.2-28.redhat_2.1.el8eap< * |
unaffected | ||
| … +31 more rows | |||
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | 0:800.4.1-1.GA_redhat_00001.1.el9eap< * |
unaffected |
0:8.0.4-3.GA_redhat_00007.1.el9eap< * |
unaffected | ||
0:2.33.0-1.redhat_00015.1.el9eap< * |
unaffected | ||
1:2.0.0-2.redhat_00005.1.el9eap< * |
unaffected | ||
0:1.8.0-2.redhat_00001.1.el9eap< * |
unaffected | ||
0:2.2.0-2.redhat_00001.1.el9eap< * |
unaffected | ||
0:1.16.1-2.redhat_00007.1.el9eap< * |
unaffected | ||
0:3.2.2-28.redhat_2.1.el9eap< * |
unaffected | ||
| … +31 more rows | |||
| Red Hat | Red Hat Single Sign-On 7 | any |
unaffected |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 7 | 0:18.0.18-1.redhat_00001.1.el7sso< * |
unaffected |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 8 | 0:18.0.18-1.redhat_00001.1.el8sso< * |
unaffected |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 9 | 0:18.0.18-1.redhat_00001.1.el9sso< * |
unaffected |
| Red Hat | RHEL-8 based Middleware Containers | 7.6-54< * |
unaffected |
I. Basic Information for CVE-2024-8883
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Keycloak: vulnerable redirect uri validation results in open redirec
Source: CVE Program / CVE List V5
Vulnerability Description
A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat Keycloak 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Keycloak是美国红帽（Red Hat）公司的一套为现代应用和服务提供身份验证和管理功能的软件。 Red Hat Keycloak 25.0.6之前版本存在输入验证错误漏洞，该漏洞源于存在配置错误，允许攻击者将用户重定向到任意URL，从而使授权码等敏感信息暴露给攻击者。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | - | 0 ~ 22.0.12 | - |
|
| Red Hat | Red Hat Build of Keycloak | - |
cpe:/a:redhat:build_keycloak:22
|
|
| Red Hat | Red Hat Build of Keycloak | - |
cpe:/a:redhat:build_keycloak:24
|
|
| Red Hat | Red Hat build of Keycloak 22 | 22.0.13-1 ~ * |
cpe:/a:redhat:build_keycloak:22::el9
|
|
| Red Hat | Red Hat build of Keycloak 22 | 22-18 ~ * |
cpe:/a:redhat:build_keycloak:22::el9
|
|
| Red Hat | Red Hat build of Keycloak 22 | 22-21 ~ * |
cpe:/a:redhat:build_keycloak:22::el9
|
|
| Red Hat | Red Hat build of Keycloak 24 | 24.0.8-1 ~ * |
cpe:/a:redhat:build_keycloak:24::el9
|
|
| Red Hat | Red Hat build of Keycloak 24 | 24-17 ~ * |
cpe:/a:redhat:build_keycloak:24::el9
|
|
| Red Hat | Red Hat build of Keycloak 24 | 24-17 ~ * |
cpe:/a:redhat:build_keycloak:24::el9
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | - |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | - |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:800.4.1-1.GA_redhat_00001.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:8.0.4-3.GA_redhat_00007.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:2.33.0-1.redhat_00015.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 1:2.0.0-2.redhat_00005.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:1.8.0-2.redhat_00001.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:2.2.0-2.redhat_00001.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:1.16.1-2.redhat_00007.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:3.2.2-28.redhat_2.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:2.15.1-1.redhat_00001.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:3.14.0-2.redhat_00006.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:4.0.5-1.redhat_00001.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 1:2.0.0-2.redhat_00005.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:2.0.1-1.redhat_00002.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:0.1.0-2.redhat_00010.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:1.12.284-2.redhat_00002.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:1.2.5-2.redhat_00001.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:800.4.0-1.GA_redhat_00001.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:2.1.0-4.redhat_00001.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | 0:6.2.31-1.Final_redhat_00002.1.el8eap ~ * |
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
|
|
II. Public POCs for CVE-2024-8883
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8883.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-8883
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-8883 (12)
-
-
🔗 2312511 – (CVE-2024-8883) CVE-2024-8883 Keycloak: Vulnerable Redirect URI Validation Results in Open Redirec Read full article issue-tracking x_refsource_REDHAT
-
🔗 RHSA-2024:6889 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6886 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6887 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6882 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:8824 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6880 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:8823 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6878 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:8826 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:10385 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
IV. Related Vulnerabilities
V. Comments for CVE-2024-8883
No comments yet