CVE-2023-6484 — Keycloak: log injection during webauthn authentication or registration
A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a mino…
Published: 2024-04-25 · CVSS: 5.3 · CVSS 3.1
A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7