CVE-2023-6927 — Keycloak: open redirect via "form_post.jwt" jarm response mode
A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" whi…
Published: 2023-12-18 · CVSS: 4.6 · CVSS 3.1
A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7