CVE-2023-6484

mediumpriority · track · 0EPSS 0.010 · 63 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.01% (63rd) EPSS
CVSS 5.3 · medium
Is it mine?
28 products
Check your exposure
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedrh-sso-7/sso7-rhel8-init-container@sha256:7c11cf4ea78020a3fba69c85e56c1c1eed08af61e7215dae5dcf7425f341b79d_amd64 as a component of Middleware Containers for OpenShiftredhat_csaf

    To install the Red Hat Single Sign-On Operator, use the Operator Marketplace interface in OpenShift Container Platform.

    https://access.redhat.com/errata/RHSA-2024:1865
  • Fixedrh-sso-7/sso7-rhel8-init-container@sha256:d89710eaa9b45dc180c311bd020255759383b0eb07826265e4ba810c6a047196_s390x as a component of Middleware Containers for OpenShiftredhat_csaf

    To install the Red Hat Single Sign-On Operator, use the Operator Marketplace interface in OpenShift Container Platform.

    https://access.redhat.com/errata/RHSA-2024:1865
  • Fixedrh-sso-7/sso7-rhel8-init-container@sha256:f02e961e0c796ac8b65de30a5c364c63337003ba9d2b05b7041565cf3bd9d8c0_ppc64le as a component of Middleware Containers for OpenShiftredhat_csaf

    To install the Red Hat Single Sign-On Operator, use the Operator Marketplace interface in OpenShift Container Platform.

    https://access.redhat.com/errata/RHSA-2024:1865
  • Fixedrh-sso-7/sso7-rhel8-operator-bundle@sha256:81208c494048b526ff577b0c9673f4e310e84627671d2da7ac072aa11292aedc_amd64 as a component of Middleware Containers for OpenShiftredhat_csaf

    To install the Red Hat Single Sign-On Operator, use the Operator Marketplace interface in OpenShift Container Platform.

    https://access.redhat.com/errata/RHSA-2024:1865
  • Fixedrh-sso-7/sso7-rhel8-operator@sha256:586edd67e9b88b7f11bcec01308ef66aa20f7fd7307b821c1e6da5dbdee0786a_s390x as a component of Middleware Containers for OpenShiftredhat_csaf

    To install the Red Hat Single Sign-On Operator, use the Operator Marketplace interface in OpenShift Container Platform.

    https://access.redhat.com/errata/RHSA-2024:1865
  • Fixedrh-sso-7/sso7-rhel8-operator@sha256:990daa5745e5c3ba9da0087a0198de272027794949b8c5f45b86023702bfe8a0_ppc64le as a component of Middleware Containers for OpenShiftredhat_csaf

    To install the Red Hat Single Sign-On Operator, use the Operator Marketplace interface in OpenShift Container Platform.

    https://access.redhat.com/errata/RHSA-2024:1865
  • Fixedrh-sso-7/sso7-rhel8-operator@sha256:bc38682492e8166dca7a08d0eae81469270b5f979ff80f075bc63183126098c0_amd64 as a component of Middleware Containers for OpenShiftredhat_csaf

    To install the Red Hat Single Sign-On Operator, use the Operator Marketplace interface in OpenShift Container Platform.

    https://access.redhat.com/errata/RHSA-2024:1865
02

cvss

Technical severity, 0–10. One row per scoring source.

5.3
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · FSTEC (BDU) RU
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · ENISA EU
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · secalert@redhat.com USexploitability 3.9 · impact 1.4
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · OSV
v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · Red Hat Product Security US
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-117USCWE-117USCWE-117USCWE-117USCWE-74US
05

affected products (28)

Products and version ranges known to be affected.

showing 20 of 28
06

advisories (5)

Vendor and ecosystem advisories describing this.

  • RHSA-2024:1865Red Hat Security Advisory: Red Hat Single Sign-On 7.6.8 Operator enhancement and security update2024-04-16csaf · redhat_csafUS

    Red Hat Single Sign-On 7.6.8 Operator enhancement and security update. This is an enhancement and security update with Low impact rating and package name 'rh-sso7-keycloak'. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • WID-SEC-W-2024-0406Keycloak und Red Hat Single Sign On: Schwachstelle ermöglicht Manipulation von DateienDeutsch2024-02-15csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak und Red Hat Single Sign On ausnutzen, um Dateien zu manipulieren.

  • WID-SEC-W-2024-0910Red Hat Single Sign On: Mehrere Schwachstellen ermöglichen Umgehen von SicherheitsvorkehrungenDeutsch2024-04-16csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen, DDoS-Angriffe durchzuführen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.

  • WID-SEC-W-2024-0914Red Hat Enterprise Linux (keycloak): Mehrere SchwachstellenDeutsch2024-04-16csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Cross-Site Scripting (XSS)-Angriffe durchzuführen oder einen Denial-of-Service-Zustand zu verursachen.

  • GHSA-j628-q885-8gr5Keycloak vulnerable to log Injection during WebAuthn authentication or registration2024-04-17ghsa · osvUS

    A flaw was found in keycloak 22.0.5. Errors in browser client during setup/auth with "Security Key login" (WebAuthn) are written into the form, send to Keycloak and logged without escaping allowing log injection. Acknowledgements: Special thanks toTheresa Henze for reporting this issue and helping us improve our security.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundosvredhat_csafNVDCVE.orgMITRE
published 2024-04-25modified 2026-06-26
09

references (35)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan