Executive brief
Keycloak XSS via use of malicious payload as group name when creating new group from admin console
Affected products
- Maven org.keycloak:keycloak-core
Junglewise Threat Intelligence
CVE-2022-0225: Keycloak XSS via use of malicious payload as group name when creating new group from admin console
CVE-2022-0225 · Severity: low · CVSS 3.1 · Published 2022-08-27
Technologies: org.keycloak:keycloak-core (Maven). Vendors: Maven.