CVE-2023-6484

MediumCVSS 5.3/10Last modified Jun 26, 2026

Description

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-117

Affected software

VendorProductVersions
——< 22.0.9; >= 23.0.0, < 23.0.5
Red HatRed Hat build of Keycloak 22—
Red HatRed Hat build of Keycloak 22—
Red HatRed Hat build of Keycloak 22—
Red HatRed Hat build of Keycloak 22.0.10—
Red HatRed Hat Single Sign-On 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 8—
Red HatRed Hat Single Sign-On 7.6 for RHEL 8—
Red HatRed Hat Single Sign-On 7.6 for RHEL 9—
Red HatRed Hat Single Sign-On 7.6 for RHEL 9—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHSSO 7.6.8—

References

Timeline

Published
Apr 25, 2024
Last modified
Jun 26, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-64855.4The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing CVE-2023-64865.4The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS metabox in allCVE-2023-64875.4The LuckyWP Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Header Title' field in all versionsCVE-2023-64885.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_buttonCVE-2023-64896.5A denial of service vulnerability was identified in GitLab CE/EE, versions 16.7.7 prior to 16.8.6, 16.9 prior to 16.9.4 and 16.10 prior to 1CVE-2023-64914.3The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wCVE-2023-64924.3The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up toCVE-2023-64934.3The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery iCVE-2023-64944.4The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versionCVE-2023-64954.8The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all verCVE-2023-64965.3The Manage Notification E-mails plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.8.5 via CVE-2023-64974.8The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automatic redirect URL setting
CVE-2023-6484: Medium severity, CVSS 5.3 | Vulnix