CVE-2022-3782

CVE-2022-3782 is a critical path traversal vulnerability in Red Hat Keycloak, specifically affecting clients utilizing a wildcard in the "Valid Redirect URIs" field. An attacker can exploit this flaw by double URL encoding a malicious redirect, bypassing validation to access unauthorized URLs, potentially leading to sensitive information disclosure or further attacks. With a CVSS score of 9.1 (Critical), this vulnerability has a low attack complexity and does not require user interaction or privileges. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.