8 matches found
keycloak-services: keycloak-services: Stored XSS on login page via kcSanitize bypass
A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript executio...
5.5CVSS5.8AI score0.00268EPSS
SaveExploits0References4
20