CVE-2014-3652: URL Redirection to Untrusted Site ('Open Redirect')

May 17, 2022 (updated August 16, 2023)

JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.

References

access.redhat.com/security/cve/cve-2014-3652
bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3652
github.com/advisories/GHSA-5r7w-pjx8-99qg
github.com/keycloak/keycloak/commit/6b2a4229e3b869eec9d4adc30c1afdf71e78cbdf
issues.jboss.org/browse/KEYCLOAK-700
nvd.nist.gov/vuln/detail/CVE-2014-3652

Detect and mitigate CVE-2014-3652 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →