Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2mq8-99q7-55wx

Опубликовано: 13 мая 2021
Источник: github
Github: Прошло ревью
CVSS3: 8.3

Описание

Code injection in keycloak

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Пакеты

Наименование

org.keycloak:keycloak-parent

maven
Затронутые версииВерсия исправления

>= 9.0.0, < 12.0.3

12.0.3

EPSS

Процентиль: 65%
0.0119
Низкий

8.3 High

CVSS3

Дефекты

CWE-20
CWE-79

Связанные уязвимости

CVSS3: 8.3
redhat
больше 5 лет назад

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 7.5
nvd
больше 5 лет назад

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 7.5
debian
больше 5 лет назад

A flaw was found in keycloak. The new account console in keycloak can ...

EPSS

Процентиль: 65%
0.0119
Низкий

8.3 High

CVSS3

Дефекты

CWE-20
CWE-79