pontushanssen··on Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokensIt was published 2024-01-11. The page has been updated to include the publish date. Thanks for the feedback!
pontushanssen··on Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokensCVE-2023-6927 Keycloak vulnerability allows bypassing redirect URI validation which can be used as a vector for stealing authorization codes, access tokens and be used to redirect victims to arbitrary hosts.