MEDIUM5.4
GHSA-46c8-635v-68r2
Keycloak Authorization Bypass vulnerability
Quick fix
GHSA-46c8-635v-68r2 — org.keycloak:keycloak-services: upgrade to the fixed version with the command below.
# pom.xml: bump <version>22.0.10</version> for org.keycloak:keycloak-servicesDetails
Due to a permissive regular expression hardcoded for filtering allowed hosts to register a dynamic client, a malicious user with enough information about the environment could benefit and jeopardize an environment with this specific Dynamic Client Registration with TrustedDomain configuration previously unauthorized.
#### Acknowledgements: Special thanks to Bastian Kanbach for reporting this issue and helping us improve our security.
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven/org.keycloak:keycloak-services
Introduced in:
0Fixed in: 22.0.10Fix
# pom.xml: bump <version>22.0.10</version> for org.keycloak:keycloak-servicesMaven/org.keycloak:keycloak-services
Introduced in:
23.0.0Fixed in: 24.0.3Fix
# pom.xml: bump <version>24.0.3</version> for org.keycloak:keycloak-servicesReferences
- https://github.com/keycloak/keycloak/security/advisories/GHSA-46c8-635v-68r2[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2023-6544[ADVISORY]
- https://access.redhat.com/errata/RHSA-2024:1860[WEB]
- https://access.redhat.com/errata/RHSA-2024:1861[WEB]
- https://access.redhat.com/errata/RHSA-2024:1862[WEB]
- https://access.redhat.com/errata/RHSA-2024:1864[WEB]
- https://access.redhat.com/errata/RHSA-2024:1866[WEB]
- https://access.redhat.com/errata/RHSA-2024:1867[WEB]
- https://access.redhat.com/errata/RHSA-2024:1868[WEB]
- https://access.redhat.com/security/cve/CVE-2023-6544[WEB]
- https://bugzilla.redhat.com/show_bug.cgi?id=2253116[WEB]
- https://github.com/keycloak/keycloak[PACKAGE]