Information disclosure via plaintext restart cookie

Cleartext storage in Red Hat Keycloak products allows remote attackers to read client parameters from PAR authorization responses. The PAR request_uri flow serializes client-provided parameters in plaintext into the KC_RESTART cookie returned in the authorization server's HTTP response. The attacker needs network access to invoke and observe that flow; the reported consequence is disclosure of those parameters without data modification or service interruption.