Description
A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | keycloak-services | keycloak 17.0.0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
ndmalc/CVE-2021-20323 ★ 12 · Dec 7, 2022
-
Cappricio-Securities/CVE-2021-20323 ★ 3 · Jan 11, 2024
A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.
-
cscpwn0sec/CVE-2021-20323 ★ 2 · Jul 7, 2024
Exploitation Scanner Cross Site Scripting vulnerability in Keycloak.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting http/cves/2021/CVE-2021-20323.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.keycloak:keycloak-core | >= 15.0.0, < 17.0.0 | 17.0.0 | GHSA-xpgc-j48j-jwv9 |
Advisories 1
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026