THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2023-6134 (MEDIUM 4.6) — A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the re

[NVD] CVE-2023-6134 (MEDIUM 4.6) — A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the re

lownvdPublished 2023-12-14

CVE-2023-6134 CVSS: 4.6 MEDIUM Published: 2023-12-14T22:15:44.087

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.

Indicators of compromise

CVE-2023-6134cve
CVE-2020-10748cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2023-6134