Description
A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker to conduct cross-site scripting or further attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | keycloak | keycloak 10.0.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.keycloak:keycloak-parent | < 10.0.2 | 10.0.2 | GHSA-hgpg-593r-hhvp |