A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.
References
Configurations
No configuration.
History
21 Nov 2024, 08:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2024:0798 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:0799 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:0800 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:0801 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:0804 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1860 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1861 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1862 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1864 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1865 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1866 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1867 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1868 - | |
| References | () https://access.redhat.com/security/cve/CVE-2023-6484 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2248423 - |
25 Apr 2024, 17:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-25 16:15
Updated : 2024-11-21 08:43
NVD link : CVE-2023-6484
Mitre link : CVE-2023-6484
CVE.ORG link : CVE-2023-6484
JSON object : View
Products Affected
No product.
CWE
CWE-117
Improper Output Neutralization for Logs