CVE-2023-6134: Keycloak: reflected xss via wildcard in oidc redirect_uri
A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.
Other sources
Keycloak prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This could permit an attacker to submit a specially crafted request leading to XSS or possibly further attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.keycloak:keycloak-servicesto a version that resolves this vulnerability.Fixed in 23.0.3
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6134?
CVE-2023-6134 has been classified as a high-severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2023-6134?
To fix CVE-2023-6134, upgrade Keycloak to version 23.0.3 or later, or update Red Hat Single Sign-On and Red Hat Keycloak to their respective patched versions.
Which software versions are affected by CVE-2023-6134?
CVE-2023-6134 affects Keycloak versions prior to 23.0.3, Red Hat Single Sign-On versions prior to 7.6.6, and Red Hat Keycloak versions prior to 22.0.7.
Can CVE-2023-6134 lead to other vulnerabilities?
Yes, CVE-2023-6134 can allow an attacker to exploit it for further attacks, including cross-site scripting (XSS).
What is the underlying issue of CVE-2023-6134?
The underlying issue of CVE-2023-6134 is a flaw in Keycloak that fails to properly validate redirect URIs with certain schemes when a wildcard is appended.