mirror of https://github.com/jacekkow/keycloak-protocol-cas
parent: 5e0093 | patch | commitdiff
Ricardo Martin
2026-05-20 368d47e38f6f5a02150b16b20b8969d001f28171
refs
author Ricardo Martin <rmartinc@redhat.com>
Wednesday, 20 May 2026 05:50 +0000
committer GitHub <noreply@github.com>
Wednesday, 20 May 2026 05:50 +0000
commit368d47e38f6f5a02150b16b20b8969d001f28171
tree 1343bb19459ff5b16c1814f7405af6d46f478f32 tree | zip | gz | bzip2
parent 5e0093939695ef4c8be92f023d5fc9b272b7239c view | diff 
Wildcards should not be allowed if authority cannot be parsed (#607) (#49130)

Closes CVE-2026-7504
Closes #49109

Signed-off-by: rmartinc <rmartinc@redhat.com>
1 files modified
3 ■■■■■ changed files
src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java 3 ●●●●● diff | view | raw | blame | history