Not rated
CVE-2022-1274 A flaw was found in Keycloak in the execute-actions-email endpoint
Description
A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Keycloak | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- herolab.usd.de herolab.usd.de
Timeline
- Published
- Last modified
Other CVEs of Keycloak
The 36 CVEs of Keycloak →
CVE-2023-4918
A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile
8.8
High
CVE-2023-1664
A flaw was found in Keycloak
6.5
Medium
CVE-2022-2237
A flaw was found in the Keycloak Node.js Adapter
6.1
Medium
CVE-2022-2256
A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7
Not rated