Cpe:2.3:a:red_hat:keycloak:*:*:*:*:*:*:*:*

A flaw in Keycloak's SAML HTTP-Redirect binding implementation allows an attacker to bypass signature verification using percent-encoded parameter names, potentially leading to full account takeover of federated users.