Search: CVE-2024-8883

A moderate severity open redirect vulnerability (CVE-2024-8883) has been identified in the Keycloak services component of Red Hat JBoss Enterprise Application Platform 8.0. This issue involves improper validation of redirect URIs, which could allow an attacker to redirect users to arbitrary external sites. Red Hat has released an asynchronous security update (JBoss Enterprise Application Platform 8.0 Update 4.1) that addresses this vulnerability. No known exploits have been reported in the wild at this time. Users are advised to apply the update after ensuring all prior errata are installed and backing up their systems.