CVE-2022-2237 - AskarLabs CVE Database

CVE-2022-2237

Vendor N/A

Product Keycloak

Weakness CWE-601 · Open redirect

Published March 27, 2023

Last update February 24, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.

Key dates

02Disclosure timeline

March 27, 2023 CVE published

February 24, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2237 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/601.html

Related vulnerabilities

04Related CVE

CVE-2021-3654 CVE-2024-0854 CVE-2026-28512 Pocket ID: OAuth redirect_uri validation bypass via userinfo/host confusion CVE-2024-42353 WebOb's location header normalization during redirect leads to open redirect CVE-2021-34764 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities