Non notée
CVE-2022-1274 A flaw was found in Keycloak in the execute-actions-email endpoint
Description
A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Keycloak | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- herolab.usd.de herolab.usd.de
Chronologie
- Publiée
- Dernière modification
Autres CVE de Keycloak
Les 36 CVE de Keycloak →
CVE-2023-4918
A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile
8.8
Élevée
CVE-2023-1664
A flaw was found in Keycloak
6.5
Moyenne
CVE-2022-2237
A flaw was found in the Keycloak Node.js Adapter
6.1
Moyenne
CVE-2022-2256
A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7
Non notée