Lucene search
GoogleOSV:GHSA-Q2GP-GPH3-88X9HistoryAug 06, 2022 - 12:00 a.m.
Keycloak allows arbitrary Javascript to be uploaded for SAML protocol mapper even if UPLOAD_SCRIPTS feature disabled
2022-08-0600:00:42
Google
osv.dev
48
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled.
Related
prion
prion
Authorization
2022-08-05 17:15:00
osv
osv
CVE-2022-2668
2022-08-05 17:15:08
redhatcve
redhatcve
CVE-2022-2668
2022-08-05 06:36:13
veracode
veracode
Cross-site Scripting (XSS)
2022-08-08 03:14:32
cve
cve
CVE-2022-2668
2022-08-05 17:15:00
github
github
redhat
redhat
nessus
nessus
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Related for OSV:GHSA-Q2GP-GPH3-88X9