Security Advisory

CVE-2022-4361

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-07-07 19:57:44

Last updated 2024-11-12 19:43:42

Assigner redhat

State PUBLISHED

Description

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.

← Browse all CVEs View on cve.org ↗