CVE-2023-6291

HighCVSS 7.1/10Last modified Nov 4, 2026

Description

A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-601

Affected software

VendorProductVersions
Red HatRed Hat build of Keycloak 22—
Red HatRed Hat build of Keycloak 22—
Red HatRed Hat build of Keycloak 22—
Red HatRed Hat build of Keycloak 22.0.7—
Red HatRed Hat Single Sign-On 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 8—
Red HatRed Hat Single Sign-On 7.6 for RHEL 8—
Red HatRed Hat Single Sign-On 7.6 for RHEL 9—
Red HatRed Hat Single Sign-On 7.6 for RHEL 9—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatSingle Sign-On 7.6.6—
Red HatMigration Toolkit for Applications 6—
Red HatMigration Toolkit for Applications 7—
Red HatOpenShift Serverless—
Red HatRed Hat Data Grid 8—
Red HatRed Hat Decision Manager 7—
Red HatRed Hat Fuse 7—
Red HatRed Hat JBoss Data Grid 7—
Red HatRed Hat JBoss Enterprise Application Platform 6—
Red HatRed Hat Process Automation 7—

References

Timeline

Published
Jan 26, 2024
Last modified
Nov 4, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-62924.3The Ecwid Ecommerce Shopping Cart WordPress plugin before 6.12.5 does not have CSRF check in place when updating its settings, which could aCVE-2023-62937.1Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.CVE-2023-62947.2The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with thCVE-2023-62957.2The SiteOrigin Widgets Bundle WordPress plugin before 1.51.0 does not validate user input before using it to generate paths passed to includCVE-2023-62966.1A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown functionality of the filCVE-2023-62976.1A vulnerability classified as problematic has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown paCVE-2023-62986.5A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main of the file PdfDocumCVE-2023-62996.5A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unknown processing of thCVE-2023-63006.1A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknownCVE-2023-63016.1A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerabCVE-2023-63027.2A vulnerability was found in CSZCMS 1.3.0 and classified as critical. Affected by this issue is some unknown functionality of the file \viewCVE-2023-63034.8A vulnerability was found in CSZCMS 1.3.0. It has been classified as problematic. This affects an unknown part of the file /admin/settings/
CVE-2023-6291: High severity, CVSS 7.1 | Vulnix