Skip to content
OpenAdvisories

Vendor

Keycloak

16 known vulnerabilities.

Products

Keycloak 15 keycloak REST API 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2022-4361 Public exploit

    Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC

    Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL val…

    Keycloak Keycloak org.keycloak:keycloak-services Maven