CVE-2023-6291

Summary

CVE-2023-6291 is a vulnerability affecting Keycloak's redirect_uri validation logic. This issue allows for bypassing explicitly allowed hosts, potentially allowing an attacker to steal an access token. If exploited, the attacker could impersonate other users and gain unauthorized access to protected resources. This vulnerability poses a significant risk to security and requires immediate attention from Keycloak users for patching or mitigation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.