A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Red Hat Single Sign-On 7 | unaffected | — | ||||||
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 7 | affected |
|
||||||
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 8 | affected |
|
||||||
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 9 | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
| AND |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Single Sign-On 7 | |||
| keycloak-core | cpe:/a:redhat:red_hat_single_sign_on:7.6 | RHSA-2023:1049 | 2023-03-01T00:00:00Z |
| Red Hat Single Sign-On 7.6 for RHEL 7 | |||
| rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el7sso | cpe:/a:redhat:red_hat_single_sign_on:7.6::el7 | RHSA-2023:1043 | 2023-03-01T00:00:00Z |
| Red Hat Single Sign-On 7.6 for RHEL 8 | |||
| rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el8sso | cpe:/a:redhat:red_hat_single_sign_on:7.6::el8 | RHSA-2023:1044 | 2023-03-01T00:00:00Z |
| Red Hat Single Sign-On 7.6 for RHEL 9 | |||
| rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el9sso | cpe:/a:redhat:red_hat_single_sign_on:7.6::el9 | RHSA-2023:1045 | 2023-03-01T00:00:00Z |
No data.
Subscriptions
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-0968 | A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker. |
 Github GHSA |
GHSA-9hhc-pj4w-w5rv | Keycloak Cross-site Scripting on OpenID connect login service |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-03T01:27:54.542Z
Reserved: 2022-11-24T14:10:49.215Z
Link: CVE-2022-4137
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-09-25T20:15:09.897
Modified: 2024-11-21T07:34:38.850
Link: CVE-2022-4137
Redhat
OpenCVE Enrichment
No data.