CVE-2023-6544

A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A malicious user with enough information about the environment could jeopardize an environment with this specific Dynamic Client Registration and TrustedDomain configuration previously unauthorized.

Score
CVSS 3.1 5.4 Medium
Status
Deferred - secalert@redhat.com
Published
2024-04-25
Last modified
2025-11-11
Weaknesses
CWE-625

Affected products

References

 
 
© AVABIS GmbH privacypolicy about