Lucene search

CVE-2021-20222

🗓️ 23 Mar 2021 17:13:15Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 87 Views

A flaw in keycloak allows execution of malicious code via the new account console

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 11
CNVD	Red Hat keycloak cross-site scripting vulnerability (CNVD-2022-05532)	24 Mar 202100:00	–	cnvd
Prion	Design/Logic Flaw	23 Mar 202117:15	–	prion
RedhatCVE	CVE-2021-20222	16 Feb 202106:03	–	redhatcve
NVD	CVE-2021-20222	23 Mar 202117:15	–	nvd
OSV	GHSA-2MQ8-99Q7-55WX Code injection in keycloak	13 May 202122:29	–	osv
OSV	CVE-2021-20222	23 Mar 202117:15	–	osv
IBM Security Bulletins	Security Bulletin: Rational Test Automation Server is vulnerable to malicious code execution due to Keycloak (CVE-2021-20222)	5 Dec 202206:04	–	ibm
Github Security Blog	Code injection in keycloak	13 May 202122:29	–	github
Veracode	Cross-Site Scripting (XSS)	15 Mar 202104:19	–	veracode
Cvelist	CVE-2021-20222	23 Mar 202116:36	–	cvelist

Nvd

Vulners

Node

redhat keycloakRange9.0.0–13.0.0

[
  {
    "product": "keycloak",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "keycloak 13.0.0"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Mar 2021 17:15Current

7.3High risk

Vulners AI Score7.3

CVSS25.1

CVSS37.5

EPSS0.00513