Lucene search
+L

1 matches found

OSV
OSV
added 2020/04/15 9:9 p.m.69 views

GHSA-8VF3-4W62-M3PQ XSS in Keycloak

It was found in all keycloak versions before 9.0.0 that links to external applications Application Links in the admin console are not validated properly and could allow Stored XSS attacks. An authed malicious user could create URLs to trick users in other realms, and possibly conduct further...

5.4CVSS5.7AI score0.00758EPSS
SaveExploits0References2
Rows per page
Query Builder