Cross-site Scripting in keycloak
Moderate severity
GitHub Reviewed
Published
Feb 9, 2022
to the GitHub Advisory Database
•
Updated Apr 22, 2024
Description
Published by the National Vulnerability Database
Nov 17, 2020
Reviewed
Apr 1, 2021
Published to the GitHub Advisory Database
Feb 9, 2022
Last updated
Apr 22, 2024
A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.
References