Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-2585

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-f5h4-wmp5-xhg6

Client Spoofing within the Keycloak Device Authorisation Grant Under certain pre-conditions the vulnerability allows an attacker to spoof parts of the device flow and use a device_code to retrieve an access token for other OAuth clients.

gitlab/maven/org.keycloak/keycloak-server-spi-private/CVE-2023-2585

Client Spoofing within the Keycloak Device Authorisation Grant Under certain pre-conditions the vulnerability allows an attacker to spoof parts of the device flow and use a device_code to retrieve an access token for other OAuth clients.

gitlab/maven/org.keycloak/keycloak-services/CVE-2023-2585

Client Spoofing within the Keycloak Device Authorisation Grant Under certain pre-conditions the vulnerability allows an attacker to spoof parts of the device flow and use a device_code to retrieve an access token for other OAuth clients.