Lucene search

K
cvelistRedhatCVELIST:CVE-2023-6484
HistoryApr 25, 2024 - 3:58 p.m.

CVE-2023-6484 Keycloak: log injection during webauthn authentication or registration

2024-04-2515:58:18
CWE-117
redhat
raw.githubusercontent.com
1
keycloak
log injection
webauthn

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.7%

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.7%

Related for CVELIST:CVE-2023-6484