CVE-2021-20222

CVE-2021-20222 affects Keycloak before 13.0.0: cross-site scripting via the new account console referrer URL, enabling malicious code execution. Impacts include confidentiality, integrity, and availability. Remediation: upgrade to Keycloak 13.0.0+ (e.g., 13.0.0-1 per Arch Linux ASA); check vendor...