← All advisories

Medium severity6.1NVD Advisory· Published Dec 15, 2019· Updated Jun 17, 2026

CVE-2014-3652

CVE-2014-3652

Description

JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.keycloak:keycloak-servicesMaven	< 1.1.0.Beta1	1.1.0.Beta1

Affected products

2

ghsa-coords
pkg:maven/org.keycloak/keycloak-services
Range: < 1.1.0.Beta1
JBoss KeyCloak/JBoss KeyCloakv5
Range: through 2014-09-19

Patches

Vulnerability mechanics

References

6

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchVendor AdvisoryWEB
access.redhat.com/security/cve/cve-2014-3652nvdVendor AdvisoryWEB
github.com/advisories/GHSA-5r7w-pjx8-99qgghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-3652ghsaADVISORY
github.com/keycloak/keycloak/commit/6b2a4229e3b869eec9d4adc30c1afdf71e78cbdfghsaWEB
issues.jboss.org/browse/KEYCLOAK-700ghsaWEB

News mentions

0

No linked articles in our index yet.