CVE-2023-6484

Published: Apr 25, 2024

Modified: Mar 2, 2026

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

Vendor	Product	Versions
Unknown	keycloak	affected `0 - < 22.0.9` affected `23.0.0 - < 23.0.5`
Red Hat	Red Hat build of Keycloak 22	unaffected `22.0.10-1 - < *`
Red Hat	Red Hat build of Keycloak 22	unaffected `22-13 - < *`
Red Hat	Red Hat build of Keycloak 22	unaffected `22-16 - < *`
Red Hat	Red Hat build of Keycloak 22.0.10	All versions
Red Hat	Red Hat Single Sign-On 7	All versions
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 7	unaffected `0:18.0.12-1.redhat_00001.1.el7sso - < *`
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 7	unaffected `0:18.0.13-1.redhat_00001.1.el7sso - < *`
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 8	unaffected `0:18.0.12-1.redhat_00001.1.el8sso - < *`
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 8	unaffected `0:18.0.13-1.redhat_00001.1.el8sso - < *`
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 9	unaffected `0:18.0.12-1.redhat_00001.1.el9sso - < *`
Red Hat	Red Hat Single Sign-On 7.6 for RHEL 9	unaffected `0:18.0.13-1.redhat_00001.1.el9sso - < *`
Red Hat	RHEL-8 based Middleware Containers	unaffected `7.6-41 - < *`
Red Hat	RHEL-8 based Middleware Containers	unaffected `7.6-46 - < *`
Red Hat	RHEL-8 based Middleware Containers	unaffected `7.6-16 - < *`
Red Hat	RHEL-8 based Middleware Containers	unaffected `7.6-18 - < *`
Red Hat	RHEL-8 based Middleware Containers	unaffected `7.6.8-2 - < *`
Red Hat	RHSSO 7.6.8	All versions