CVE-2022-4361 | BDVDB-2026-206513 Detail

Description#

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-07-07Record published in the CVE List.
2. Version 22024-11-12Most recent update recorded in the CVE List.