Lucene search
PRIOn knowledge basePRION:CVE-2022-0225HistoryAug 26, 2022 - 6:15 p.m.
Cross site scripting
2022-08-2618:15:00
PRIOn knowledge base
www.prio-n.com
6
keycloak
stored xss
admin console
security flaw
A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| single_sign-on | eq | 7.0 |
Related
redhatcve
redhatcve
CVE-2022-0225
2022-01-13 19:35:16
ibm
ibm
cvelist
cvelist
CVE-2022-0225
2022-08-26 17:25:46
cve
cve
CVE-2022-0225
2022-08-26 18:15:08
osv
osv
Keycloak XSS via use of malicious payload as group name when creating new group from admin console
2022-08-27 00:00:44
Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown
2022-11-29 23:55:23
CVE-2022-0225
2022-08-26 18:15:08
veracode
veracode
Cross-site Scripting (XSS)
2022-08-29 03:30:14
github
github
nvd
nvd
CVE-2022-0225
2022-08-26 18:15:08
nessus
nessus
redhat
redhat