Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-20222

Опубликовано: 23 мар. 2021
Источник: debian
EPSS Низкий

Описание

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
keycloakitppackage

EPSS

Процентиль: 65%
0.0119
Низкий

Связанные уязвимости

CVSS3: 8.3
redhat
больше 5 лет назад

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 7.5
nvd
больше 5 лет назад

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.3
github
около 5 лет назад

Code injection in keycloak

EPSS

Процентиль: 65%
0.0119
Низкий