{"action":"Upgrade org.keycloak:keycloak-services to 23.0.3 or later.","affected":[{"fixed":"23.0.3","introduced":"0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2023-6291"],"ecosystem":"Maven","epss":0.0095,"exploited":false,"fixed_versions":["23.0.3"],"ghsa_id":"GHSA-mpwq-j3xf-7m5w","id":"tcs_01M5N95GNH32ZA5PD2A199TM9K","modified_at":"2024-02-16T08:12:43.498216Z","published_at":"2023-12-21T18:25:30Z","references":["https://osv.dev/vulnerability/GHSA-mpwq-j3xf-7m5w","https://github.com/keycloak/keycloak/security/advisories/GHSA-mpwq-j3xf-7m5w","https://nvd.nist.gov/vuln/detail/CVE-2023-6291","https://github.com/keycloak/keycloak/commit/b2e91105315ccf2c1df549b4f6c5948322cbfd1b","https://access.redhat.com/errata/RHSA-2023:7854","https://access.redhat.com/errata/RHSA-2023:7855","https://access.redhat.com/errata/RHSA-2023:7856","https://access.redhat.com/errata/RHSA-2023:7857","https://access.redhat.com/errata/RHSA-2023:7858","https://access.redhat.com/errata/RHSA-2023:7860","https://access.redhat.com/errata/RHSA-2023:7861","https://access.redhat.com/security/cve/CVE-2023-6291","https://bugzilla.redhat.com/show_bug.cgi?id=2251407","https://github.com/keycloak/keycloak"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-mpwq-j3xf-7m5w","url":"https://osv.dev/vulnerability/GHSA-mpwq-j3xf-7m5w"}],"summary":"The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted"}