| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-parent | < 10.0.2 | 10.0.2 |
| keycloak | = 10.0.1 | |
| single sign-on | < 7.4.1 | 7.4.1 |
A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker to conduct cross-site scripting or further attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free