Description

A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.

Remediation

References

https://bugzilla.redhat.com/show_bug.cgi?id=1847428

Related Vulnerabilities

CVE-2023-41329 Vulnerability in maven package org.wiremock:wiremock

CVE-2023-26474 Vulnerability in maven package org.xwiki.platform:xwiki-platform-legacy-oldcore

CVE-2023-27479 Vulnerability in maven package org.xwiki.platform:xwiki-platform-panels-ui

CVE-2023-27480 Vulnerability in maven package org.xwiki.platform:xwiki-platform-xar-model

CVE-2015-8851 Vulnerability in npm package node-uuid

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Issue Tracking Mitigation Vendor Advisory CWE-79