Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri

中 5.4CVE-2023-6134 · GHSA-cvg2-7c3j-g36j · 14/12/2023 公開 · 22/09/2026 更新

要点

CVE-2023-6134 は org.keycloak:keycloak-services, keycloak (redhat), openshift container platform (redhat) に影響する深刻度「中」 (CVSS 5.4) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.3%（全脆弱性の 70.8% より高い）。
対処：23.0.3, 22.0.7, 7.6 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
org.keycloak:keycloak-services Maven	`< 23.0.3`	`23.0.3`
keycloak redhat	`< 22.0.7`	`22.0.7`
openshift container platform redhat	`= 4.11= 4.12`	修正版なし
openshift container platform for power redhat	`= 4.10= 4.9`	修正版なし
openshift container platform ibm z systems redhat	`= 4.10= 4.9`	修正版なし
single sign-on redhat	`< 7.6`	`7.6`

概要

Keycloak prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This could permit an attacker to submit a specially crafted request leading to XSS or possibly further attacks.

NVD の説明

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.