Keycloak vulnerable to log Injection during WebAuthn authentication or registration
A flaw was found in keycloak 22.0.5. Errors in browser client during setup/auth with "Security Key login" (WebAuthn) are written into the form, send to Keycloak and logged without escaping allowing log injection. Acknowledgements: Special thanks toTheresa Henze for reporting this issue and helping us improve our security.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-6484US | — | — | ||
A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor i… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2024:0798WEB
- https://access.redhat.com/errata/RHSA-2024:0799WEB
- https://access.redhat.com/errata/RHSA-2024:0800WEB
- https://access.redhat.com/errata/RHSA-2024:0801WEB
- https://access.redhat.com/errata/RHSA-2024:0804WEB
- https://access.redhat.com/errata/RHSA-2024:1860WEB
- https://access.redhat.com/errata/RHSA-2024:1861WEB
- https://access.redhat.com/errata/RHSA-2024:1862WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan