(RHSA-2023:7861) Important: Red Hat build of Keycloak 22.0.7 images enhancement and security update

Red Hat build of Keycloak 22.0.7 is an integrated solution, available as a Red Hat JBoss Middleware for OpenShift containerized image, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications.

This erratum releases a security update and enhancement images for Red Hat build of Keycloak 22.0.7 for use within the OpenShift Container Platform 4.12, 4.13 and 4.14 cloud computing Platform-as-a-Service (PaaS) for on-premise or private cloud deployments, aligning with the standalone product release.

Security Fix(es):

• reflected XSS via wildcard in OIDC redirect_uri (CVE-2023-6291)

• redirect_uri validation logic that allows for a bypass of otherwise explicitly allowed hosts (CVE-2023-6134)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.