Database/Control plane, storage & DevOps
Keycloak: Wildcard in the JARM form_post.jwt response mode
CVSS 4.6CVE-2023-6927Control plane, storage & DevOpscurated
Impact
Wildcard in the JARM form_post.jwt response mode -> steal authorization codes and tokens (bypasses the CVE-2023-6134 fix)
Who can reach it
Network (remote)
What to do
Control-plane: upgrade + remove wildcards from client redirect URIs
References
Related entries
- Keycloak: SAML signature scope determined by position, not ReferenceCVE-2024-8698 · KeycloakHigh
- Keycloak: Regex complexity in SearchQueryUtilsCVE-2024-10270 · KeycloakMedium
- Keycloak: OIDC authentication flaw - attacker reusing data from a same-realm request impersonates a userCVE-2023-0264 · KeycloakMedium
- Keycloak: Redirect scheme filtering bypassed by appending a wildcardCVE-2023-6134 · KeycloakMedium
- MinIO (SFTP gateway): The SFTP frontend trusts an SSH public key it should not, letting an attacker authenticate asCVE-2025-27414 · MinIO (SFTP gateway)Medium
- HashiCorp Vault: KV v2 leaks sensitive payload content into server and audit logs on malformed requestsCVE-2025-4166 · HashiCorp VaultMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.