Not rated
CVE-2022-2668 An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if…
Description
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Keycloak | Versions not published |
References
- access.redhat.com access.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Keycloak
The 36 CVEs of Keycloak →
CVE-2023-4918
A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile
8.8
High
CVE-2023-1664
A flaw was found in Keycloak
6.5
Medium
CVE-2022-1274
A flaw was found in Keycloak in the execute-actions-email endpoint
Not rated
CVE-2022-2237
A flaw was found in the Keycloak Node.js Adapter
6.1
Medium