Description

It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain reflected XSS via a malicious server.

Remediation

References

https://bugzilla.redhat.com/show_bug.cgi?id=1489161

https://access.redhat.com/errata/RHSA-2017:2906

https://access.redhat.com/errata/RHSA-2017:2905

https://access.redhat.com/errata/RHSA-2017:2904

http://www.securityfocus.com/bid/101618

Related Vulnerabilities

CVE-2022-0225 Vulnerability in maven package org.keycloak:keycloak-core

CVE-2019-19771 Vulnerability in npm package bitcionjs

CVE-2022-0198 Vulnerability in maven package edu.stanford.nlp:stanford-corenlp

CVE-2022-1243 Vulnerability in maven package org.webjars.bower:urijs

CVE-2022-25875 Vulnerability in npm package svelte

Severity

Medium

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Issue Tracking Third Party Advisory VDB Entry