CVE Catalog
CVE-2023-6484
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk1.01%
59th percentile - higher than 59% of all known CVEs
Summary
A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.
Risk Assessment
An attacker can manipulate log content, hindering analysis and potentially masking other security events.
Recommendation
It is recommended to update Keycloak to a version that fixes this vulnerability and to validate input data in authentication forms.
Original NVD description (English source)
A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.