logo

Database

Reflected cross-site scripting (XSS) In org.keycloak:keycloak-core

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-12742. NVD-2022-12743. OSV-2022-12744. GHSA-m4fv-gm5m-47255. GCVE-2022-12746. GHSA-m4fv-gm5m-4725

References

1. https://bugzilla.redhat.com/show_bug.cgi?id=20731572. https://github.com/shoucheng3/keycloak__keycloak_CVE-2022-1274_20-0-33. https://github.com/keycloak/keycloak/security/advisories/GHSA-m4fv-gm5m-47254. https://github.com/keycloak/keycloak/pull/167645. https://github.com/keycloak/keycloak/commit/fc3c61235fa30132123c17ed8702ff7b3a672fe96. https://herolab.usd.de/security-advisories/usd-2021-0033

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.