{"action":"Upgrade org.keycloak:keycloak-services to 22.0.9 (22.x) or 23.0.5 (23.x) or later.","affected":[{"fixed":"22.0.9","introduced":"0"},{"fixed":"23.0.5","introduced":"23.0.0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2023-6484"],"ecosystem":"Maven","epss":0.01008,"exploited":false,"fixed_versions":["22.0.9","23.0.5"],"ghsa_id":"GHSA-j628-q885-8gr5","id":"tcs_01M5N922Q85V30ZN2AF3J98KRD","modified_at":"2026-07-21T15:15:51.339365624Z","published_at":"2024-04-17T18:24:03Z","references":["https://osv.dev/vulnerability/GHSA-j628-q885-8gr5","https://github.com/keycloak/keycloak/security/advisories/GHSA-j628-q885-8gr5","https://nvd.nist.gov/vuln/detail/CVE-2023-6484","https://github.com/keycloak/keycloak/issues/25078","https://github.com/keycloak/keycloak/commit/f9049565a9a228faa08138b9269d66d3de6c7e9a","https://github.com/keycloak/keycloak/commit/110f64a8146d0817252f90cf4b5e6a62aa897aff","https://github.com/keycloak/keycloak","https://github.com/advisories/GHSA-j628-q885-8gr5","https://bugzilla.redhat.com/show_bug.cgi?id=2248423","https://access.redhat.com/security/cve/CVE-2023-6484","https://access.redhat.com/errata/RHSA-2024:1868","https://access.redhat.com/errata/RHSA-2024:1867","https://access.redhat.com/errata/RHSA-2024:1866","https://access.redhat.com/errata/RHSA-2024:1865","https://access.redhat.com/errata/RHSA-2024:1864","https://access.redhat.com/errata/RHSA-2024:1862","https://access.redhat.com/errata/RHSA-2024:1861","https://access.redhat.com/errata/RHSA-2024:1860","https://access.redhat.com/errata/RHSA-2024:0804","https://access.redhat.com/errata/RHSA-2024:0801","https://access.redhat.com/errata/RHSA-2024:0800","https://access.redhat.com/errata/RHSA-2024:0799","https://access.redhat.com/errata/RHSA-2024:0798"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-j628-q885-8gr5","url":"https://osv.dev/vulnerability/GHSA-j628-q885-8gr5"}],"summary":"Keycloak vulnerable to log Injection during WebAuthn authentication or registration"}