Log in Start free

Vulnerability · Published Dec 14, 2023 · Assigned by redhat

CVE-2023-6134Keycloak: reflected xss via wildcard in oidc redirect_uri

Medium 4.6

In plain English

A medium-severity cross-site scripting in Red Hat build of Keycloak 22 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.6Medium
Exploit odds (30 days)1.3%top 29.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Mavenorg.keycloak:keycloak-services23.0.3GHSA-cvg2-7c3j-g36j

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 22.0.7 see references
Red Hat Red Hat Single Sign-On 7 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 7 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 7 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 8 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 8 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 9 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 9 see references
Red Hat RHEL-8 based Middleware Containers see references
Red Hat RHEL-8 based Middleware Containers see references
Red Hat RHEL-8 based Middleware Containers see references
Red Hat Single Sign-On 7.6.6 see references

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

References