Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-46c8-635v-68r2
Advisory ID github_osv/GHSA-46c8-635v-68r2
Aliases CVE-2023-6544
Summary Keycloak Authorization Bypass vulnerability Due to a permissive regular expression hardcoded for filtering allowed hosts to register a dynamic client, a malicious user with enough information about the environment could benefit and jeopardize an environment with this specific Dynamic Client Registration with TrustedDomain configuration previously unauthorized. #### Acknowledgements: Special thanks to Bastian Kanbach for reporting this issue and helping us improve our security.
Status Published
Exploitability 0.5
Weighted Severity 4.9
Risk 2.5
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-625 Permissive Regular Expression
System Score Found at
cvssv3.1 5.4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-46c8-635v-68r2/GHSA-46c8-635v-68r2.json
generic_textual MODERATE
Reference id Reference type URL
https://github.com/keycloak/keycloak
2253116 Bug https://bugzilla.redhat.com/show_bug.cgi?id=2253116
CVE-2023-6544 Advisory https://access.redhat.com/security/cve/CVE-2023-6544
CVE-2023-6544 https://nvd.nist.gov/vuln/detail/CVE-2023-6544
GHSA-46c8-635v-68r2 https://github.com/keycloak/keycloak/security/advisories/GHSA-46c8-635v-68r2
RHSA-2024:1860 https://access.redhat.com/errata/RHSA-2024:1860
RHSA-2024:1861 https://access.redhat.com/errata/RHSA-2024:1861
RHSA-2024:1862 https://access.redhat.com/errata/RHSA-2024:1862
RHSA-2024:1864 https://access.redhat.com/errata/RHSA-2024:1864
RHSA-2024:1866 https://access.redhat.com/errata/RHSA-2024:1866
RHSA-2024:1867 https://access.redhat.com/errata/RHSA-2024:1867
RHSA-2024:1868 https://access.redhat.com/errata/RHSA-2024:1868
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-46c8-635v-68r2/GHSA-46c8-635v-68r2.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-25T19:19:09Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2023/6xxx/CVE-2023-6544.json

Source Advisory: vulnrichment/CVE-2023-6544

View SSVC decision tree 
[{'Exploitation': 'none'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]