Threats tagged 'ghsa-phcq-jxj6-jpjq'

CVE-2025-12789 is an Open Redirect vulnerability in Red Hat Single Sign-On affecting versions 7.3.33 and earlier. The flaw occurs during the logout process where the redirect_uri parameter in the openid-connect logout protocol does not properly validate URLs, allowing redirection to potentially malicious sites. Red Hat Single Sign-On is end-of-life, and no official patch or mitigation meeting Red Hat's criteria is available.