Riskcovery

CVE-2023-6927

Keycloak: open redirect via "form_post.jwt" jarm response mode

State
Published
Severity
4.6 Medium
Published
Dec 18, 2023
Updated
Sep 22, 2026
Reserved
Dec 18, 2023

Read the record on cve.org

Description

A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.

Scores

CVSSScoreVectorSource
3.14.6 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:Nredhat

Weaknesses

  • CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Affected Products

ProductVersions
Red Hat build of Keycloak 22Red Hat
  • 22-7 and laterNot affected
Red Hat build of Keycloak 22.0.8Red Hat
    Red Hat Single Sign-On 7Red Hat
      Red Hat Single Sign-On 7.6 for RHEL 7Red Hat
      • 0:18.0.11-3.redhat_00001.1.el7sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 7Red Hat
      • 0:18.0.12-1.redhat_00001.1.el7sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 8Red Hat
      • 0:18.0.11-3.redhat_00001.1.el8sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 8Red Hat
      • 0:18.0.12-1.redhat_00001.1.el8sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 9Red Hat
      • 0:18.0.11-3.redhat_00001.1.el9sso and laterNot affected
      Red Hat Single Sign-On 7.6 for RHEL 9Red Hat
      • 0:18.0.12-1.redhat_00001.1.el9sso and laterNot affected
      RHEL-8 based Middleware ContainersRed Hat
      • 7.6-39 and laterNot affected
      RHEL-8 based Middleware ContainersRed Hat
      • 7.6-41 and laterNot affected
      Single Sign-On 7.6.6Red Hat

        References

        Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.