CVE-2014-3652: URL Redirection to Untrusted Site ('Open Redirect')

May 17, 2022 (updated August 16, 2023)

JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.

References

access.redhat.com/security/cve/cve-2014-3652
bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3652
github.com/advisories/GHSA-5r7w-pjx8-99qg
github.com/keycloak/keycloak/commit/6b2a4229e3b869eec9d4adc30c1afdf71e78cbdf
issues.jboss.org/browse/KEYCLOAK-700
nvd.nist.gov/vuln/detail/CVE-2014-3652

Code Behaviors & Features

Detect and mitigate CVE-2014-3652 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →