Red Hat keycloak Cross-Site Scripting Vulnerability (CNVD-2022-05532)

Keycloak is an open source identity and access management solution for modern applications and services. keycloak is vulnerable to a reflective cross-site scripting vulnerability. The vulnerability stems from a new account console in keycloak that allows malicious code to be executed using a referrer URL. An attacker could exploit the vulnerability to inject malicious code.