Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2mq8-99q7-55wx

Опубликовано: 13 мая 2021
Источник: github
Github: Прошло ревью
CVSS3: 8.3

Описание

Code injection in keycloak

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Пакеты

Наименование

org.keycloak:keycloak-parent

maven
Затронутые версииВерсия исправления

>= 9.0.0, < 12.0.3

12.0.3

EPSS

Процентиль: 63%
0.0044
Низкий

8.3 High

CVSS3

Дефекты

CWE-20
CWE-79

Связанные уязвимости

CVSS3: 8.3
redhat
почти 5 лет назад

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 7.5
nvd
почти 5 лет назад

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 7.5
debian
почти 5 лет назад

A flaw was found in keycloak. The new account console in keycloak can ...

EPSS

Процентиль: 63%
0.0044
Низкий

8.3 High

CVSS3

Дефекты

CWE-20
CWE-79