Riskcovery

CVE-2023-6291

Keycloak: redirect_uri validation bypass

State
Published
Severity
7.1 High
Published
Jan 26, 2024
Updated
Sep 22, 2026
Reserved
Nov 24, 2023

Read the record on cve.org

Description

A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:Lredhat

Weaknesses

  • CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Affected Products

ProductVersions
Red Hat build of Keycloak 22Red Hat
  • 22.0.7-1 and laterNot affected
Red Hat build of Keycloak 22Red Hat
  • 22-6 and laterNot affected
Red Hat build of Keycloak 22Red Hat
  • 22-9 and laterNot affected
Red Hat build of Keycloak 22.0.7Red Hat
    Red Hat Single Sign-On 7Red Hat
      Red Hat Single Sign-On 7.6 for RHEL 7Red Hat
      • 0:18.0.11-2.redhat_00003.1.el7sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 7Red Hat
      • 0:18.0.12-1.redhat_00001.1.el7sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 8Red Hat
      • 0:18.0.11-2.redhat_00003.1.el8sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 8Red Hat
      • 0:18.0.12-1.redhat_00001.1.el8sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 9Red Hat
      • 0:18.0.11-2.redhat_00003.1.el9sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 9Red Hat
      • 0:18.0.12-1.redhat_00001.1.el9sso and laterNot affected
      RHEL-8 based Middleware ContainersRed Hat
      • 7.6-38 and laterNot affected
      RHEL-8 based Middleware ContainersRed Hat
      • 7.6.6-2 and laterNot affected
      RHEL-8 based Middleware ContainersRed Hat
      • 7.6-41 and laterNot affected
      Single Sign-On 7.6.6Red Hat
        Migration Toolkit for Applications 6Red Hat
          Migration Toolkit for Applications 7Red Hat
            OpenShift ServerlessRed Hat
              Red Hat Data Grid 8Red Hat
                Red Hat Decision Manager 7Red Hat
                  Red Hat Fuse 7Red Hat
                    Red Hat JBoss Data Grid 7Red Hat
                      Red Hat JBoss Enterprise Application Platform 6Red Hat
                        Red Hat Process Automation 7Red Hat

                          References

                          Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.