Description

It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain reflected XSS via a malicious server.

Remediation

References

https://bugzilla.redhat.com/show_bug.cgi?id=1489161

https://access.redhat.com/errata/RHSA-2017:2906

https://access.redhat.com/errata/RHSA-2017:2905

https://access.redhat.com/errata/RHSA-2017:2904

http://www.securityfocus.com/bid/101618

Related Vulnerabilities

CVE-2019-1003049 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2022-24614 Vulnerability in maven package com.drewnoakes:metadata-extractor

CVE-2020-7748 Vulnerability in npm package @tsed/core

CVE-2019-10317 Vulnerability in maven package org.jvnet.hudson.plugins:sitemonitor

CVE-2019-1003068 Vulnerability in maven package com.inkysea.vmware.vra:vmware-vrealize-automation-plugin

Severity

Medium

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Issue Tracking Third Party Advisory VDB Entry