vulnti.work

A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, m…

高危 CVSS 7.1
CVECVE-2023-6291
首次发现2026-09-22 05:01 UTC
披露时间2024-01-26 15:15 UTC
最后更新2026-09-22 05:01 UTC
通道状态auto

摘要

A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

受影响产品

  • :
  • :
  • :
  • :

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD