Keycloak Redirect URI Validation Bypass Vulnerability Allowing Access Token Theft

A vulnerability exists in Keycloak's handling of redirect URIs that utilize wildcards. This flaw allows an attacker, who controls a different path on the same web server, to bypass the validation of allowed paths in redirect URIs. Exploiting this vulnerability could lead to the theft of an access token, resulting in unauthorized information disclosure.

Impact

By bypassing the redirect URI validation, an attacker could potentially steal access tokens, leading to unauthorized access to sensitive information.