https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:35:45.984585+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-6927 CVE-2023-6927 — Keycloak: open redirect via "form_post.jwt" jarm response mode 2026-10-03T22:35:45.987067+00:00

Affected: Red Hat build of Keycloak 22, Red Hat build of Keycloak 22.0.8, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, Red Hat RHEL-8 based Middleware Containers, Red Hat Single Sign-On 7.6.6

A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.