Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-20222

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-2mq8-99q7-55wx

Code injection in keycloak A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

gitlab/maven/org.keycloak/keycloak-core/CVE-2021-20222

Improper Input Validation The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

gitlab/maven/org.keycloak/keycloak-model-jpa/CVE-2021-20222

Improper Input Validation The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

gitlab/maven/org.keycloak/keycloak-parent/CVE-2021-20222

Improper Input Validation A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

gitlab/maven/org.keycloak/keycloak-server-spi-private/CVE-2021-20222

Improper Input Validation The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

gitlab/maven/org.keycloak/keycloak-services/CVE-2021-20222

Improper Input Validation The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

gitlab/maven/org.keycloak/keycloak-wildfly-server-subsystem/CVE-2021-20222

Improper Input Validation The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

gitlab/npm/keycloak-connect/CVE-2021-20222

Improper Input Validation The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.