Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-9VM7-V8WJ-3FQW
HistoryJan 23, 2024 - 2:43 p.m.

keycloak-core: open redirect via "form_post.jwt" JARM response mode

2024-01-2314:43:50
CWE-601
GitHub Advisory Database
github.com
18
keycloak
core patch
open redirect
jarm response mode
form_post.jwt
cve-2023-6134
security patch
authorization codes
tokens

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.2%

JSON

An incomplete fix was found in Keycloak Core patch. An attacker can steal authorization codes or tokens from clients using a wildcard in the JARM response mode “form_post.jwt”. It is observed that changing the response_mode parameter in the original proof of concept from “form_post” to “form_post.jwt” can bypass the security patch implemented to address CVE-2023-6134.

Affected configurations

Vulners
Node
org.keycloak\keycloakMatchcore
CPENameOperatorVersion
org.keycloak:keycloak-corelt23.0.4

Related

github 2
osv 5
veracode 1
nvd 2
redhat 12
prion 2
redhatcve 3
cvelist 2
cve 2
nessus 6
github
github
Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri
2023-12-18 19:31:02
Keycloak Open Redirect vulnerability
2023-12-19 00:30:21
osv
osv
Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri
2023-12-18 19:31:02
keycloak-core: open redirect via "form_post.jwt" JARM response mode
2024-01-23 14:43:50
Keycloak Open Redirect vulnerability
2023-12-19 00:30:21
veracode
veracode
Cross-Site Scripting (XSS)
2023-12-19 06:59:21
nvd
nvd
CVE-2023-6134
2023-12-14 22:15:44
CVE-2023-6927
2023-12-18 23:15:10
redhat
redhat
(RHSA-2023:7861) Important: Red Hat build of Keycloak 22.0.7 images enhancement and security update
2023-12-14 19:13:59
(RHSA-2023:7860) Important: Red Hat build of Keycloak 22.0.7 enhancement and security update
2023-12-14 19:13:55
(RHSA-2023:7855) Important: Red Hat Single Sign-On 7.6.6 security update on RHEL 9
2023-12-14 18:54:36
prion
prion
Cross site scripting
2023-12-14 22:15:00
Design/Logic Flaw
2023-12-18 23:15:00
redhatcve
redhatcve
CVE-2023-6927
2023-12-18 16:11:21
CVE-2023-6134
2023-11-15 00:28:21
CVE-2023-6920
2023-12-18 16:11:15
cvelist
cvelist
CVE-2023-6134 Keycloak: reflected xss via wildcard in oidc redirect_uri
2023-12-14 21:42:12
CVE-2023-6927 Keycloak: open redirect via "form_post.jwt" jarm response mode
2023-12-18 22:59:07
cve
cve
CVE-2023-6134
2023-12-14 22:15:44
CVE-2023-6927
2023-12-18 23:15:10
nessus
nessus
RHEL 7 : Red Hat Single Sign-On 7.6.6 security update on RHEL 7 (Important) (RHSA-2023:7854)
2023-12-15 00:00:00
RHEL 8 : Red Hat Single Sign-On 7.6.6 security update on RHEL 8 (Important) (RHSA-2023:7856)
2023-12-15 00:00:00
RHEL 9 : Red Hat Single Sign-On 7.6.6 security update on RHEL 9 (Important) (RHSA-2023:7855)
2023-12-15 00:00:00

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.2%

JSON
Related for GHSA-9VM7-V8WJ-3FQW
github2osv5veracode1nvd2redhat12prion2redhatcve3cvelist2cve2nessus6