GHSA-2mq8-99q7-55wx
Code injection in keycloak
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.keycloak:keycloak-parent | >= 9.0.0, < 12.0.3 | 12.0.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
References
External links from the advisory. They lead to third-party sites.