A flaw was found in the Keycloak... CVE-2023-6544

- AV AC AU C I A
发布: 2024-04-25
修订: 2024-04-25

A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A malicious user with enough information about the environment could jeopardize an environment with this specific Dynamic Client Registration and TrustedDomain configuration previously unauthorized.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息