CVE-2017-1000500

keycloak: Host header injection in password reset page can allow for poisoned URL

View on CVE.org
Published Jan 3, 2018 CVSS 3.0 · 4.2 Medium EPSS n/a KEV · Not listed
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12161. Reason: This candidate is a reservation duplicate of CVE-2017-12161. Notes: All CVE users should reference CVE-2017-12161 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-qgm9-232x-hwpx Moderate severity vulnerability that affects org.keycloak:keycloak-core
History

No history.

Subscriptions

No data.

Weaknesses

Sources

Status
REJECTED
Assigner
mitre
Published
Updated
Dec 10, 2018, 1:57 PM
Reserved
Jan 3, 2018, 12:00 AM

View source JSON

No data.

Status
Rejected
Published
Jan 3, 2018, 3:29 PM
Modified
Nov 7, 2023, 2:37 AM

View source JSON

Severity
Public date
Dec 14, 2017, 12:00 AM

View source Bugzilla JSON

No data.