Cross-site Scripting in Keycloak

MEDIO 6.1CVE-2021-20323 · GHSA-xpgc-j48j-jwv9 · Published 25/03/2022 · updated 17/06/2026

En resumen

CVE-2021-20323 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.keycloak:keycloak-core, keycloak (redhat).
Probabilidad de explotación en los próximos 30 días (EPSS): 37.2%, mayor que el 98.5% de las vulnerabilidades.
Solución: actualizar a 17.0.0 o posterior.

Package	Affected versions	Patched versions
org.keycloak:keycloak-core Maven	`≥ 15.0.0, < 17.0.0`	`17.0.0`
keycloak redhat	`< 17.0.0`	`17.0.0`

A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak version 15. The issue was fixed in version 17.0.0.

NVD description

A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 15.0.0, < 17.0.0

17.0.0

< 17.0.0

17.0.0

Más vulnerabilidades de org.keycloak:keycloak-core

Ver todo →