mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-25 20:57:49 +02:00
819 B
819 B
CVE-2022-4361
Description
Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.
POC
Reference
No PoCs from references.