CVE-2023-6134: Keycloak: reflected xss via wildcard in oidc redirect_uri
Vulnerability summary
CVE-2023-6134 is a medium (CVSS 5.4) vulnerability in redhat keycloak. EPSS estimates a 1.32% chance of exploitation in the next 30 days, higher than 70.8% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 4.6, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6Timeline
- 14-12-2023PublishedVulnerability first disclosed.
- 22-09-2026Last modifiedVulnerability information updated.
Description
A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.
CVSS metrics
3 scores · 3 sources · 1 version- CVE.orgCNA4.6MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:NDiffers
- OSV · MavenEcosystem advisory · calculated4.6MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:NDiffers
EPSS trend
Probability
1.32%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.32% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (access.redhat.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, low-privilege account, user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat5 products
- keycloak< 22.0.7
- openshift_container_platform4.11 | 4.12
- openshift_container_platform_for_power4.9 | 4.10
- openshift_container_platform_ibm_z_systems4.9 | 4.10
- single_sign-on< 7.6 | na
Org.keycloak1 product
- keycloak-services< 23.0.3
2 vendors · 6 products
References
18 linksShow all 18 references
- github.com/keycloak/keycloakPACKAGE