GitHub Advisoryadvisory · Maven

GHSA-46c8-635v-68r2 Keycloak Authorization Bypass vulnerability

MEDIUM Published 2024-04-17 Modified 2024-04-25 Official page ↗
Aliases
CVE-2023-6544
Ecosystem
Maven
Packages
org.keycloak:keycloak-services
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-625
Reviewed
2024-04-17

Affected packages

• Maven org.keycloak:keycloak-services: < 22.0.10 → fixed in 22.0.10 • Maven org.keycloak:keycloak-services: >= 23.0.0, < 24.0.3 → fixed in 24.0.3

Description

Due to a permissive regular expression hardcoded for filtering allowed hosts to register a dynamic client, a malicious user with enough information about the environment could benefit and jeopardize an environment with this specific Dynamic Client Registration with TrustedDomain configuration previously unauthorized. Acknowledgements: Special thanks to Bastian Kanbach for reporting this issue and helping us improve our security.

Related

Alias · CVE (1)

  • CVE-2023-6544 A flaw was found in the Keycloak package. vulnerability

Weakness · CWE (1)

  • CWE-625 Permissive Regular Expression weakness

References