Back to Database
Status published
Medium
CVE-2023-6484
Keycloak: log injection during webauthn authentication or registration
Vulnerability Description
A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-6484
Credits & Attribution
No credits recorded in the NVD database.
References
- https://access.redhat.com/errata/RHSA-2024:0798
- https://access.redhat.com/errata/RHSA-2024:0799
- https://access.redhat.com/errata/RHSA-2024:0800
- https://access.redhat.com/errata/RHSA-2024:0801
- https://access.redhat.com/errata/RHSA-2024:0804
- https://access.redhat.com/errata/RHSA-2024:1860
- https://access.redhat.com/errata/RHSA-2024:1861
- https://access.redhat.com/errata/RHSA-2024:1862
- https://access.redhat.com/errata/RHSA-2024:1864
- https://access.redhat.com/errata/RHSA-2024:1865
- https://access.redhat.com/errata/RHSA-2024:1866
- https://access.redhat.com/errata/RHSA-2024:1867
- https://access.redhat.com/errata/RHSA-2024:1868
- https://access.redhat.com/security/cve/CVE-2023-6484
- https://bugzilla.redhat.com/show_bug.cgi?id=2248423
- https://github.com/advisories/GHSA-j628-q885-8gr5
More from Unknown
View All →CVE-2025-9978
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
Unknown
0
CVE-2025-9959
Sandbox escape in smolagents Local Python execution environment via dunder attributes
High
7.6
CVE-2025-9900
Libtiff: libtiff write-what-where
High
8.8
CVE-2025-9784
Undertow: undertow madeyoureset http/2 ddos vulnerability
High
7.5
CVE-2025-9710
Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments
Unknown
0
Affected Vendor
Unknown
View all reports →Affected Software
Red Hat build of Keycloak 22, Red Hat build of Keycloak 22.0.10, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, RHEL-8 based Middleware Containers, RHSSO 7.6.8
Vulnerable Versions:
0, 23.0.0, 22.0.10-1, 22-13, 22-16, 0:18.0.12-1.redhat_00001.1.el7sso, 0:18.0.13-1.redhat_00001.1.el7sso, 0:18.0.12-1.redhat_00001.1.el8sso, 0:18.0.13-1.redhat_00001.1.el8sso, 0:18.0.12-1.redhat_00001.1.el9sso, 0:18.0.13-1.redhat_00001.1.el9sso, 7.6-41, 7.6-46, 7.6-16, 7.6-18, 7.6.8-2
Timeline
Official Publish:
April 25th, 2024
Last Modified:
June 26th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.