CVE-2022-4361 : Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.

Published 2023-07-07 20:15:10

Updated 2023-07-17 17:50:07

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Exploit prediction scoring system (EPSS) score for CVE-2022-4361

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 22 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-4361

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None
10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	3.9	6.0	Red Hat, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-4361

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by: nvd@nist.gov (Primary)

CWE-81 Improper Neutralization of Script in an Error Message Web Page

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters that could be interpreted as web-scripting elements when they are sent to an error page.

Assigned by: secalert@redhat.com (Secondary)

References for CVE-2022-4361

https://bugzilla.redhat.com/show_bug.cgi?id=2151618

2151618 – (CVE-2022-4361) CVE-2022-4361 Keycloak | RHSSO: XSS due to lax URI scheme validation
Issue Tracking;Vendor Advisory
https://github.com/keycloak/keycloak/commit/a1cfe6e24e5b34792699a00b8b4a8016a5929e3a

Check the redirect URI is http(s) when used for a form Post (#22) · keycloak/keycloak@a1cfe6e · GitHub
Patch

Products affected by CVE-2022-4361

Redhat » Keycloak
Versions before (<) 21.1.2
cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*
Matching versions
Redhat » Openshift Container Platform » Version: 4.12
cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*
Matching versions
When used together with: Redhat » Enterprise Linux » Version: 8.0
Redhat » Openshift Container Platform » Version: 4.11
cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:*:*
Matching versions
When used together with: Redhat » Enterprise Linux » Version: 8.0
Redhat » Single Sign-on
Versions from including (>=) 7.6 and before (<) 7.6.4
cpe:2.3:a:redhat:single_sign-on:*:*:*:*:*:*:*:*
Matching versions
When used together with: Redhat » Enterprise Linux » Version: 7.0
When used together with: Redhat » Enterprise Linux » Version: 8.0
When used together with: Redhat » Enterprise Linux » Version: 9.0
Redhat » Single Sign-on » Version: N/A Text-only Edition
cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*
Matching versions
Redhat » Openshift Container Platform For Ibm Linuxone » Version: 4.10
cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.10:*:*:*:*:*:*:*
Matching versions
When used together with: Redhat » Enterprise Linux » Version: 8.0
Redhat » Openshift Container Platform For Ibm Linuxone » Version: 4.9
cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.9:*:*:*:*:*:*:*
Matching versions
When used together with: Redhat » Enterprise Linux » Version: 8.0
Redhat » Openshift Container Platform For Power » Version: 4.10
cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10:*:*:*:*:*:*:*
Matching versions
When used together with: Redhat » Enterprise Linux » Version: 8.0
Redhat » Openshift Container Platform For Power » Version: 4.9
cpe:2.3:a:redhat:openshift_container_platform_for_power:4.9:*:*:*:*:*:*:*
Matching versions
When used together with: Redhat » Enterprise Linux » Version: 8.0

Vulnerability Details : CVE-2022-4361

Exploit prediction scoring system (EPSS) score for CVE-2022-4361

CVSS scores for CVE-2022-4361

CWE ids for CVE-2022-4361

References for CVE-2022-4361

Products affected by CVE-2022-4361