Writeup: Keycloak open redirect (CVE-2023-6927)
CVE-2023-6927 Keycloak vulnerability allows bypassing redirect URI validation which can be used as a vector for stealing authorization codes, access tokens and be used to redirect victims to arbitrary hosts.
Mozilla Firefox Kasper Karlsson Pontus Hanssen Key For Code Exchange Code Exchange Open Source Identity
Source: securityblog.omegapoint.se