CVE-2025-10044
Full vulnerability record from the local CVENow database.
Description
A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages (e.g., fake support phone numbers or URLs), which are displayed within the trusted Keycloak UI. This creates a phishing vector, potentially tricking users into contacting malicious actors.
Severity
MEDIUM
CVSS score
4.3
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2025-09-05 20:15:34.430000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-10044",
"sourceIdentifier": "[email protected]",
"published": "2025-09-05T20:15:34.430",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages (e.g., fake support phone numbers or URLs), which are displayed within the trusted Keycloak UI. This creates a phishing vector, potentially tricking users into contacting malicious actors."
},
{
"lang": "es",
"value": "Se encontró un fallo en Keycloak. La consola de cuentas de Keycloak y otras páginas aceptan texto arbitrario en el parámetro de consulta error_description. Este texto se renderiza directamente en las páginas de error sin validación ni saneamiento. Aunque la codificación HTML previene XSS, un atacante puede diseñar URLs con mensajes engañosos (por ejemplo, números de teléfono de soporte falsos o URLs), que se muestran dentro de la interfaz de usuario (UI) de confianza de Keycloak. Esto crea un vector de phishing, engañando potencialmente a los usuarios para que contacten a actores maliciosos."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Keycloak",
"product": "keycloak",
"defaultStatus": "unaffected",
"collectionURL": "https://github.com/keycloak/keycloak",
"packageName": "keycloak",
"versions": [
{
"version": "0",
"lessThan": "26.2.9",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 26.0",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-operator-bundle",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.0::el9"
],
"versions": [
{
"version": "26.0.17-1",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 26.0",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-rhel9",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.0::el9"
],
"versions": [
{
"version": "26.0-21",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 26.0",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-rhel9-operator",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.0::el9"
],
"versions": [
{
"version": "26.0-22",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 26.0.17",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "keycloak",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.0"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 26.2",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-operator-bundle",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.2::el9"
],
"versions": [
{
"version": "26.2.9-1",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 26.2",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-rhel9",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.2::el9"
],
"versions": [
{
"version": "26.2-9",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 26.2",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-rhel9-operator",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.2::el9"
],
"versions": [
{
"version": "26.2-9",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 26.2.9",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "keycloak",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.2::el9"
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-09-05T20:15:11.764555Z",
"id": "CVE-2025-10044",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2025:16399",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:16400",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:19923",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:19925",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-10044",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2393551",
"source": "[email protected]"
},
{
"url": "https://github.com/keycloak/keycloak/pull/42443",
"source": "[email protected]"
}
]
}