Keycloak: reflected xss attack
Published Sep 25, 2023
8.1
HIGHCVSS 3.1
EPSS 1.19%
Description
A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker.
Affected products
No data.
Configuration 2
- 7.6
Running on/with
- 7.0
- 8.0
- 9.0
No data.
Red Hat Single Sign-On 7
rh-sso7-keycloak
Fixed · RHSA-2023:1049
Red Hat Single Sign-On 7.6 for RHEL 7
rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el7sso
Fixed · RHSA-2023:1043
Red Hat Single Sign-On 7.6 for RHEL 8
rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el8sso
Fixed · RHSA-2023:1044
Red Hat Single Sign-On 7.6 for RHEL 9
rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el9sso
Fixed · RHSA-2023:1045
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Single Sign-On 7 | rh-sso7-keycloak | Fixed | RHSA-2023:1049 |
| Red Hat Single Sign-On 7.6 for RHEL 7 | rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el7sso | Fixed | RHSA-2023:1043 |
| Red Hat Single Sign-On 7.6 for RHEL 8 | rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el8sso | Fixed | RHSA-2023:1044 |
| Red Hat Single Sign-On 7.6 for RHEL 9 | rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el9sso | Fixed | RHSA-2023:1045 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (12)
- https://access.redhat.com/errata/RHSA-2023:1043 vendor-advisoryx_refsource_REDHATVendor Advisory
- https://access.redhat.com/errata/RHSA-2023:1044 vendor-advisoryx_refsource_REDHATVendor Advisory
- https://access.redhat.com/errata/RHSA-2023:1045 vendor-advisoryx_refsource_REDHATVendor Advisory
- https://access.redhat.com/errata/RHSA-2023:1049 vendor-advisoryx_refsource_REDHATVendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-4137 vdb-entryx_refsource_REDHATVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2148496 issue-trackingx_refsource_REDHATIssue TrackingVendor Advisory
- https://github.com/advisories/GHSA-9hhc-pj4w-w5rv Advisory
- https://github.com/keycloak/keycloak/commit/30d0e9d22dae51392e5a3748a1c68c116667359a
- https://github.com/keycloak/keycloak/pull/16774
- https://github.com/keycloak/keycloak/security/advisories/GHSA-9hhc-pj4w-w5rv
- https://nvd.nist.gov/vuln/detail/CVE-2022-4137
- https://www.cve.org/CVERecord?id=CVE-2022-4137
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2023:1043 | vendor-advisoryx_refsource_REDHATVendor Advisory | |
| https://access.redhat.com/errata/RHSA-2023:1044 | vendor-advisoryx_refsource_REDHATVendor Advisory | |
| https://access.redhat.com/errata/RHSA-2023:1045 | vendor-advisoryx_refsource_REDHATVendor Advisory | |
| https://access.redhat.com/errata/RHSA-2023:1049 | vendor-advisoryx_refsource_REDHATVendor Advisory | |
| https://access.redhat.com/security/cve/CVE-2022-4137 | vdb-entryx_refsource_REDHATVendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2148496 | issue-trackingx_refsource_REDHATIssue TrackingVendor Advisory | |
| https://github.com/advisories/GHSA-9hhc-pj4w-w5rv | Advisory | |
| https://github.com/keycloak/keycloak/commit/30d0e9d22dae51392e5a3748a1c68c116667359a | ||
| https://github.com/keycloak/keycloak/pull/16774 | ||
| https://github.com/keycloak/keycloak/security/advisories/GHSA-9hhc-pj4w-w5rv | ||
| https://nvd.nist.gov/vuln/detail/CVE-2022-4137 | ||
| https://www.cve.org/CVERecord?id=CVE-2022-4137 |
Change history (0)
No recorded changes yet.