Описание
A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.
A Stored Cross-site scripting (XSS) vulnerability was found in keycloak. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.
Дополнительная информация
Статус:
3.8 Low
CVSS3
Связанные уязвимости
A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.
A Stored Cross-site scripting (XSS) vulnerability was found in keycloa ...
Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles
3.8 Low
CVSS3