Log in Start free

Vulnerability · Published Apr 25, 2024 · Assigned by redhat

CVE-2023-6544Keycloak: authorization bypass

Medium 5.4

In plain English

A medium-severity security flaw in org.keycloak:keycloak-services. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)1.1%top 34.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A malicious user with enough information about the environment could jeopardize an environment with this specific Dynamic Client Registration and TrustedDomain configuration previously unauthorized.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Mavenorg.keycloak:keycloak-services22.0.10GHSA-46c8-635v-68r2
Mavenorg.keycloak:keycloak-services24.0.3GHSA-46c8-635v-68r2

Affected products (as reported)

VendorProductVersions
org.keycloak:keycloak-services 22.0.0 – before 22.0.1023.0.0 – before 24.0.3
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 22 see references
Red Hat Red Hat build of Keycloak 22.0.10 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 7 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 8 see references
Red Hat Red Hat Single Sign-On 7.6 for RHEL 9 see references
Red Hat RHEL-8 based Middleware Containers see references
Red Hat RHSSO 7.6.8 see references

Weakness: CWE-625 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

References