CVE-2024-1132
Keycloak: path transversal in redirection validation
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Keycloak: path transversal in redirection validation
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
- Record
CVE-2024-1132- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22, CWE-22
- Updated
- 2026-11-04
EUVDEUVD-2024-1134
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
- Record
EUVD-2024-1134- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-04
GitHub AdvisoriesGHSA-72vp-xfrc-42xm
Keycloak path traversal vulnerability in redirection validation
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and potentially sensitive information within the domain or possibly conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field.
Acknowledgements:
Special thanks to Axel Flamcourt for reporting this issue and helping us improve our project.
- Record
GHSA-72vp-xfrc-42xm- CVSS 4.0
- 8.6 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
NVD
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
- Record
CVE-2024-1132- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-04
OSV
Keycloak: path transversal in redirection validation
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
- Record
CVE-2024-1132- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-05
OSVGHSA-72vp-xfrc-42xm
Keycloak path traversal vulnerability in redirection validation
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and potentially sensitive information within the domain or possibly conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field.
Acknowledgements:
Special thanks to Axel Flamcourt for reporting this issue and helping us improve our project.
- Record
GHSA-72vp-xfrc-42xm- CVSS 4.0
- 8.6 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVRHSA-2024:1860
Red Hat Security Advisory: Red Hat Single Sign-On 7.6.8 enhancement and security update on RHEL 7
- Record
RHSA-2024:1860- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:1861
Red Hat Security Advisory: Red Hat Single Sign-On 7.6.8 security update on RHEL 8
- Record
RHSA-2024:1861- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:1862
Red Hat Security Advisory: Red Hat Single Sign-On 7.6.8 security update on RHEL 9
- Record
RHSA-2024:1862- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Affected products
- redhat keycloak
- redhat build of keycloak
- redhat jboss middleware text-only advisories
- redhat migration toolkit for applications
- redhat migration toolkit for runtimes
- redhat openshift container platform
- redhat openshift container platform for ibm z
- redhat openshift container platform for linuxone
- redhat openshift container platform for power
- redhat single sign-on
- red hat migration toolkit for runtimes 1 on rhel 8
- red hat mta-6.2-rhel-9
Show 17 moreShow less
- red hat amq broker 7
- red hat build of apicurio registry 2
- red hat build of keycloak 22
- red hat build of keycloak 22.0.10
- red hat build of quarkus
- red hat data grid 8
- red hat decision manager 7
- red hat fuse 7
- red hat jboss data grid 7
- red hat jboss enterprise application platform 6
- red hat jboss enterprise application platform 7
- red hat process automation 7
- red hat single sign-on 7.6 for rhel 7
- red hat single sign-on 7.6 for rhel 8
- red hat single sign-on 7.6 for rhel 9
- red hat rhel-8 based middleware containers
- red hat rhsso 7.6.8
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.keycloak:keycloak-servicesMaven |
before 22.0.10 | 22.0.10 |
org.keycloak:keycloak-servicesMaven |
23.0.0 up to 24.0.3 | 24.0.3 |
org.keycloak:keycloak-servicesMaven |
before 22.0.10, plus listed versions 1.0-alpha-11.0-alpha-1-120620131.0-alpha-21.0-alpha-31.0-alpha-4 Show 45 moreShow less1.0-beta-11.0-beta-1-201505211.0-beta-1-201505231.0-beta-21.0-beta-31.0-beta-41.0-final1.0-rc-11.0-rc-21.0.1.Final1.0.2.Final1.0.3.Final1.0.4.Final1.0.5.Final1.1.0.Beta11.1.0.Beta21.1.0.Final1.1.1.Final1.2.0.Beta11.2.0.CR11.2.0.Final1.3.0.Final1.3.1.Final1.4.0.Final1.5.0-Final1.5.0.Final1.5.1.Final1.6.0.Final1.6.1.Final1.7.0.CR11.7.0.Final1.8.0.Alpha11.8.0.CR11.8.0.CR21.8.0.CR31.8.0.Final1.8.1.Final1.9.0.CR11.9.0.Final1.9.1.Final1.9.2.Final1.9.3.Final1.9.4.Final1.9.5.Final1.9.7.Final |
22.0.10 |
org.keycloak:keycloak-servicesMaven |
23.0.0 up to 24.0.3, plus listed versions 23.0.123.0.223.0.323.0.423.0.5 Show 5 moreShow less23.0.623.0.724.0.024.0.124.0.2 |
24.0.3 |
rh-sso7-keycloakRed Hat:red_hat_single_sign_on:7.6::el7 From an advisory covering 5 CVEs |
before 0:18.0.13-1.redhat_00001.1.el7sso | 0:18.0.13-1.redhat_00001.1.el7sso |
rh-sso7-keycloak-serverRed Hat:red_hat_single_sign_on:7.6::el7 From an advisory covering 5 CVEs |
before 0:18.0.13-1.redhat_00001.1.el7sso | 0:18.0.13-1.redhat_00001.1.el7sso |
rh-sso7-keycloakRed Hat:red_hat_single_sign_on:7.6::el8 From an advisory covering 5 CVEs |
before 0:18.0.13-1.redhat_00001.1.el8sso | 0:18.0.13-1.redhat_00001.1.el8sso |
rh-sso7-keycloak-serverRed Hat:red_hat_single_sign_on:7.6::el8 From an advisory covering 5 CVEs |
before 0:18.0.13-1.redhat_00001.1.el8sso | 0:18.0.13-1.redhat_00001.1.el8sso |
rh-sso7-keycloakRed Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 5 CVEs |
before 0:18.0.13-1.redhat_00001.1.el9sso | 0:18.0.13-1.redhat_00001.1.el9sso |
rh-sso7-keycloak-serverRed Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 5 CVEs |
before 0:18.0.13-1.redhat_00001.1.el9sso | 0:18.0.13-1.redhat_00001.1.el9sso |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | EUVD, NVD, OSV | |
| facts | CVE List | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-1132 is a high vulnerability (CVSS 8.1) in Redhat Keycloak, published April 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. Fixed in org.keycloak:keycloak-services 22.0.10.
References
access.redhat.com/errata/RHSA-2024:1860
Show 38 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2262117
github.com/keycloak/keycloak/security/advisories/GHSA-72vp-xfrc-42xm
nvd.nist.gov/vuln/detail/CVE-2024-1132
catalog.redhat.com/software/containers
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1860.json
cve.org/CVERecord?id=CVE-2023-6484
Left out here: 110 versions. The JSON record has them.