It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain reflected XSS via a malicious server.
The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
| Link | Tags |
|---|---|
| https://access.redhat.com/errata/RHSA-2017:2904 | third party advisory vendor advisory |
| https://access.redhat.com/errata/RHSA-2017:2905 | third party advisory vendor advisory |
| https://access.redhat.com/errata/RHSA-2017:2906 | third party advisory vendor advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1489161 | issue tracking |
| http://www.securityfocus.com/bid/101618 | vdb entry third party advisory |