CVE-2023-6134
Summary
| CVE | CVE-2023-6134 |
|---|---|
| State | PUBLISHED |
| Assigner | Unknown |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-12-14 22:15:00 UTC |
| Updated | 2024-02-02 16:18:00 UTC |
| Description | Description unavailable. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Redhat | Enterprise Linux | 7.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 8.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 9.0 | All | All | All |
| Application | Redhat | Keycloak | All | All | All | All |
| Application | Redhat | Openshift Container Platform | 4.11 | All | All | All |
| Application | Redhat | Openshift Container Platform | 4.12 | All | All | All |
| Application | Redhat | Openshift Container Platform For Power | 4.10 | All | All | All |
| Application | Redhat | Openshift Container Platform For Power | 4.9 | All | All | All |
| Application | Redhat | Openshift Container Platform Ibm Z Systems | 4.10 | All | All | All |
| Application | Redhat | Openshift Container Platform Ibm Z Systems | 4.9 | All | All | All |
| Application | Redhat | Single Sign-on | All | All | All | All |
| Application | Redhat | Single Sign-on | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Red Hat | access.redhat.com | Exploit, Vendor Advisory | |
| Red Hat | access.redhat.com | Vendor Advisory | |
| Red Hat | access.redhat.com | Vendor Advisory | |
| 2249673 – (CVE-2023-6134) CVE-2023-6134 keycloak: reflected XSS via wildcard in OIDC redirect_uri | bugzilla.redhat.com | Issue Tracking | |
| Red Hat | access.redhat.com | Vendor Advisory | |
| Red Hat | access.redhat.com | Vendor Advisory | |
| cve-details | access.redhat.com | Vendor Advisory | |
| Red Hat | access.redhat.com | Vendor Advisory | |
| Red Hat | access.redhat.com | Vendor Advisory | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 996356 Java (Maven) Security Update for org.keycloak:keycloak-services (GHSA-cvg2-7c3j-g36j)