Beveiligingsadvies

CVE-2023-6927

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-18 22:59:07
Laatst bijgewerkt 2025-11-11 15:55:11
Toegewezen door redhat
CVSS-score 4.6
Status PUBLISHED

Beschrijving

A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.