CVE-2023-6544 — Keycloak: authorization bypass
A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A mal…
Published: 2024-04-25 · CVSS: 5.4 · CVSS 3.1
A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A malicious user with enough information about the environment could jeopardize an environment with this specific Dynamic Client Registration and TrustedDomain configuration previously unauthorized.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7