CVE-2024-4028

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack. Mitigation Currently the is no mitigation...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Resource and Permissions module of the admin console. A privileged user can inject scripts during the creation of a permission. Details Cross-site scripting or XSS is a code vulnerability that occurs when...