CVE-2022-4137
Keycloak: reflected xss attack
MEDIUM 6.1EPSS 1.2%
A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker.
- Affected
- Red Hat · Red Hat Single Sign-On 7 · Red Hat Single Sign-On 7.6 for RHEL 7 · Red Hat Single Sign-On 7.6 for RHEL 8 · Red Hat Single Sign-On 7.6 for RHEL 9
- CVSS v3.1 NVD
- 6.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS v3.1 REDHAT
- 8.1 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - EPSS
- 1.19% chance of exploitation in the next 30 days, 68th percentile
- Published
- 2023-09-25
- Updated
- 2024-08-03
Proof-of-concept exploits (1)
- shoucheng3/keycloak__keycloak_CVE-2022-4137_20-0-30★ · 2026-02-07
Security advisories
- https://access.redhat.com/errata/RHSA-2023:1043
- https://access.redhat.com/errata/RHSA-2023:1044
- https://access.redhat.com/errata/RHSA-2023:1045
- https://access.redhat.com/errata/RHSA-2023:1049
- https://access.redhat.com/security/cve/CVE-2022-4137
- https://bugzilla.redhat.com/show_bug.cgi?id=2148496
- advisories/GHSA-9hhc-pj4w-w5rv