A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to intera
A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Single Sign | On 7 — unspecified |
| Red Hat | Red Hat Single Sign | On 7.6 for RHEL 7 — 0:18.0.6-1.redhat_00001.1.el7sso |
| Red Hat | Red Hat Single Sign | On 7.6 for RHEL 8 — 0:18.0.6-1.redhat_00001.1.el8sso |
| Red Hat | Red Hat Single Sign | On 7.6 for RHEL 9 — 0:18.0.6-1.redhat_00001.1.el9sso |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.