Maven/org.keycloak:keycloak-core CVE-2022-0225: medium, EPSS 3.20%
Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown
Action: Upgrade org.keycloak:keycloak-core to 20.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20.0.0 | - |
Fixed versions
| 20.0.0 |
Sources
- osv: GHSA-755v-r4x4-qf7m
- https://github.com/keycloak/keycloak/security/advisories/GHSA-755v-r4x4-qf7m
- https://github.com/keycloak/keycloak
CVE-2022-0225 · published · modified · JSON