CVE-2022-2237: 
JavaScript vulnerability analysis and mitigation

A vulnerability was discovered in the Keycloak Node.js Adapter, identified as CVE-2022-2237. The flaw allows attackers to exploit an Open Redirect vulnerability in the checkSso function. The vulnerability was addressed in Red Hat Single Sign-On 7.6.2 security update (Red Hat Advisory).

The vulnerability exists in the checkSSO function of the Keycloak Node.js Adapter. The function uses the query parameter 'prompt=none' when forwarding the request to KeyCloak, which could potentially allow user authentication without interaction if the user is already authenticated with KeyCloak (Bugzilla Report).

This vulnerability could allow an attacker to perform authentication bypasses through open redirect attacks. The severity of this vulnerability has been rated as Important by Red Hat Product Security (Red Hat Advisory).

The vulnerability has been fixed in Red Hat Single Sign-On 7.6.2. Users are advised to update to this version to address the security issue (Red Hat Advisory).