mirror of https://github.com/jacekkow/keycloak-protocol-cas
parent: 7bc9d9 | patch | commitdiff
Ricardo Martin
2026-04-07 9b78be5f8eb24c6aea40027fe643b06a98362a1f
refs
author Ricardo Martin <rmartinc@redhat.com>
Tuesday, 7 April 2026 07:36 +0000
committer GitHub <noreply@github.com>
Tuesday, 7 April 2026 07:36 +0000
commit9b78be5f8eb24c6aea40027fe643b06a98362a1f
tree e78b260d4e7f61e8137523d3075445b24929ea12 tree | zip | gz | bzip2
parent 7bc9d91aafdcc1dcdf64a39d0dc9a06d429aa82a view | diff 
Consider path params in the unsafe path for RedirectUtils (#436) (#47788)

Closes CVE-2026-3872

Signed-off-by: rmartinc <rmartinc@redhat.com>
1 files modified
2 ■■■■■ changed files
src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java 2 ●●●●● diff | view | raw | blame | history