Maven/org.keycloak:keycloak-parent CVE-2022-2256: medium 5.4, EPSS 0.70%
Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles
Action: Upgrade org.keycloak:keycloak-parent to 19.0.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 19.0.2 | - |
Fixed versions
| 19.0.2 |
Sources
- osv: GHSA-w9mf-83w3-fv49
- https://github.com/keycloak/keycloak/security/advisories/GHSA-w9mf-83w3-fv49
- https://nvd.nist.gov/vuln/detail/CVE-2022-2256
- https://github.com/keycloak/keycloak/commit/8e705a65ab2aa2b079374ec859ee7a75fad5a7d9
- https://bugzilla.redhat.com/show_bug.cgi?id=2101942
- https://github.com/keycloak/keycloak
CVE-2022-2256 · published · modified · JSON