Aller au contenu
en Se connecter
4.6 Moyenne

CVE-2023-6134 A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to…

Description

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat build of Keycloak 22 22 premières → < 22-9 22-9
Red Hat build of Keycloak 22.0.7 Versions non publiées
Red Hat Single Sign-On 7 Versions non publiées
Red Hat Single Sign-On 7.6 for RHEL 7 Versions non publiées
Red Hat Single Sign-On 7.6 for RHEL 8 Versions non publiées
Red Hat Single Sign-On 7.6 for RHEL 9 Versions non publiées
RHEL-8 based Middleware Containers 7.6 premières → < 7.6-41 7.6-41
Single Sign-On 7.6.6 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat build of Keycloak 22

Les 18 CVE de Red Hat build of Keycloak 22 →
CVE-2023-0657 A flaw was found in Keycloak 3.4 Faible CVE-2024-8883 A misconfiguration flaw was found in Keycloak 6.1 Moyenne CVE-2024-8698 A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class 7.7 Élevée CVE-2024-7341 A session fixation issue was discovered in the SAML adapters provided by Keycloak 7.1 Élevée
Suivre cette CVE