Skip to content
fr Sign in
7.1 High

CVE-2023-6291 Keycloak: redirect_uri validation bypass

Description

A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Exploitable remotely over the network, without an account and if a user takes an action; the impact on data or service is limited.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
Low

Affected products and versions

Product Affected versions Fixed in
Red Hat build of Keycloak 22 22 earliest → < 22-9 22-9
Red Hat build of Keycloak 22.0.7 Versions not published
Red Hat Single Sign-On 7 Versions not published
Red Hat Single Sign-On 7.6 for RHEL 7 Versions not published
Red Hat Single Sign-On 7.6 for RHEL 8 Versions not published
Red Hat Single Sign-On 7.6 for RHEL 9 Versions not published
RHEL-8 based Middleware Containers 7.6 earliest → < 7.6-41 7.6-41
Single Sign-On 7.6.6 Versions not published
Migration Toolkit for Applications 6 Versions not published
Show the 8 other branches
Product Affected versions Fixed in
Migration Toolkit for Applications 7 Versions not published
OpenShift Serverless Versions not published
Red Hat Data Grid 8 Versions not published
Red Hat Decision Manager 7 Versions not published
Red Hat Fuse 7 Versions not published
Red Hat JBoss Data Grid 7 Versions not published
Red Hat JBoss Enterprise Application Platform 6 Versions not published
Red Hat Process Automation 7 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat build of Keycloak 22

The 18 CVEs of Red Hat build of Keycloak 22 →
CVE-2023-0657 A flaw was found in Keycloak 3.4 Low CVE-2024-8883 A misconfiguration flaw was found in Keycloak 6.1 Medium CVE-2024-8698 A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class 7.7 High CVE-2024-7341 A session fixation issue was discovered in the SAML adapters provided by Keycloak 7.1 High
Track this CVE