CVE-2023-6927

MediumCVSS 6.1/10Last modified Sep 22, 2026

Description

A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

VendorProductVersions
Red HatRed Hat build of Keycloak 22—
Red HatRed Hat build of Keycloak 22.0.8—
Red HatRed Hat Single Sign-On 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 7—
Red HatRed Hat Single Sign-On 7.6 for RHEL 8—
Red HatRed Hat Single Sign-On 7.6 for RHEL 8—
Red HatRed Hat Single Sign-On 7.6 for RHEL 9—
Red HatRed Hat Single Sign-On 7.6 for RHEL 9—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatSingle Sign-On 7.6.6—

References

Timeline

Published
Dec 18, 2023
Last modified
Sep 22, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-69289.8EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attaCVE-2023-69299.8EuroTel ETL3100 versions v01c01 and v01x37 are vulnerable to insecure direct object references that occur when the application provides direCVE-2023-69309.8EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attCVE-2023-69317.0A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privileCVE-2023-69327.0A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race coCVE-2023-69338.8The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deseriaCVE-2023-69345.4The Limit Login Attempts Reloaded plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all verCVE-2023-69355.9wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when builtCVE-2023-69369.1In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attackCVE-2023-69375.3wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was possible to combine CVE-2023-69385.4The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions up to, and includingCVE-2023-69395.5Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.
CVE-2023-6927: Medium severity, CVSS 6.1 | Vulnix