{"id":"CVE-2023-6927","summary":"Keycloak: open redirect via \"form_post.jwt\" jarm response mode","details":"A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode \"form_post.jwt\" which could be used to bypass the security patch implemented to address CVE-2023-6134.","aliases":["GHSA-9vm7-v8wj-3fqw"],"modified":"2026-08-12T03:30:31.229796631Z","published":"2023-12-18T22:59:07.495Z","database_specific":{"cna_assigner":"redhat","cwe_ids":["CWE-601"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6927.json"},"references":[{"type":"WEB","url":"https://access.redhat.com/downloads/content/package-browser/"},{"type":"WEB","url":"https://catalog.redhat.com/software/containers/"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0094"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0095"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0096"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0097"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0098"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0100"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0101"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0798"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0799"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0800"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0801"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:0804"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2023-6927"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6927.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6927"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255027"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/keycloak/keycloak","events":[{"introduced":"e6a274ea0e31c6572e795f3372f006c88122539b"},{"last_affected":"e6a274ea0e31c6572e795f3372f006c88122539b"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}]}}],"versions":["7.0","7.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-6927.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"}]}