Package · Maven

org.keycloak:keycloak-admin-ui

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 4.3

CVE-2025-10044

Keycloak: keycloak error_description injection on error pages

A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an att…

Red Hat Keycloak Red Hat build of Keycloak 26.2 Red Hat build of Keycloak 26.0 Maven

Sep 5, 2025