REDHAT-BUG-2040268
First published: Thu Jan 13 2022(Updated: )
The ”Groups” dropdown in ”Add user” is not escaped properly and can be exploited. Steps to reproduce Start a vanilla keycloak (or an existing one): docker run -p 8080:8080 -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin quay.io/keycloak/keycloak:16.1.0 Login and go to Groups. Click New to add a new group. Add a group using the payload below: "><img src=x onerror=prompt(location)> Go to Users and click Add user. Click Groups and enter a character, as o, to display the group. This will trigger our prompt from the group name. Maybe also other places has this issue? This is probably an easy fix for you, but in case you want me to look into it I can do it. I’m jxn0 on github.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Keycloak |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2022:6782
- https://access.redhat.com/errata/RHSA-2022:6783
- https://access.redhat.com/errata/RHSA-2022:6787
- https://access.redhat.com/errata/RHSA-2022:7410
- https://access.redhat.com/errata/RHSA-2022:7409
- https://access.redhat.com/errata/RHSA-2022:7411
- https://access.redhat.com/errata/RHSA-2022:7417
- https://access.redhat.com/security/cve/cve-2022-0225
- https://bugzilla.redhat.com/show_bug.cgi?id=2040268
Frequently Asked Questions
What is the severity of REDHAT-BUG-2040268?
The severity of REDHAT-BUG-2040268 is classified as moderate due to potential exploitation risks.
How do I fix REDHAT-BUG-2040268?
To fix REDHAT-BUG-2040268, ensure that you apply the latest security patches provided by Red Hat for Keycloak.
What versions of Keycloak are affected by REDHAT-BUG-2040268?
REDHAT-BUG-2040268 affects the Keycloak versions that have not been properly escaped in the 'Groups' dropdown.
What types of vulnerabilities does REDHAT-BUG-2040268 represent?
REDHAT-BUG-2040268 represents a security vulnerability related to improper input validation and escaping.
Can exploitation of REDHAT-BUG-2040268 allow unauthorized access?
Yes, exploitation of REDHAT-BUG-2040268 can allow unauthorized access or manipulation of user groups.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2022-0225
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/keycloak
- canonical/red hat keycloak