Lucene search
GoogleOSV:GHSA-W8V7-C7PM-7WFRHistorySep 02, 2022 - 12:01 a.m.
Keycloak vulnerable to Cross-Site Scripting (XSS)
2022-09-0200:01:02
Google
osv.dev
19
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
A stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.
Related
patchstack
patchstack
prion
prion
Cross site scripting
2022-09-01 21:15:00
wpvulndb
wpvulndb
cve
cve
CVE-2022-2256
2022-09-01 21:15:00
github
github
veracode
veracode
Cross-site Scripting (XSS)
2022-09-28 07:49:15
osv
osv
redhatcve
redhatcve
CVE-2022-2256
2022-06-29 20:05:41
redhat
redhat
nessus
nessus
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Related for OSV:GHSA-W8V7-C7PM-7WFR