{"action":"Upgrade org.keycloak:keycloak-services to 23.0.3 or later.","affected":[{"fixed":"23.0.3","introduced":"0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2023-6134"],"ecosystem":"Maven","epss":0.01318,"exploited":false,"fixed_versions":["23.0.3"],"ghsa_id":"GHSA-cvg2-7c3j-g36j","id":"tcs_01M5N8TBCZJNAKH5MQ3N0DFXBC","modified_at":"2024-02-16T08:17:51.387286Z","published_at":"2023-12-18T19:31:02Z","references":["https://osv.dev/vulnerability/GHSA-cvg2-7c3j-g36j","https://github.com/keycloak/keycloak/security/advisories/GHSA-cvg2-7c3j-g36j","https://nvd.nist.gov/vuln/detail/CVE-2023-6134","https://github.com/keycloak/keycloak/commit/15a21bf8e4fb71f006ba9caf25b9c9d1d152cd20","https://access.redhat.com/errata/RHSA-2023:7854","https://access.redhat.com/errata/RHSA-2023:7855","https://access.redhat.com/errata/RHSA-2023:7856","https://access.redhat.com/errata/RHSA-2023:7857","https://access.redhat.com/errata/RHSA-2023:7858","https://access.redhat.com/errata/RHSA-2023:7860","https://access.redhat.com/errata/RHSA-2023:7861","https://access.redhat.com/security/cve/CVE-2023-6134","https://bugzilla.redhat.com/show_bug.cgi?id=2249673","https://github.com/keycloak/keycloak"],"severity":{"label":"medium","score":4.6},"sources":[{"source":"osv","source_id":"GHSA-cvg2-7c3j-g36j","url":"https://osv.dev/vulnerability/GHSA-cvg2-7c3j-g36j"}],"summary":"Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri"}