Security Advisory
CVE-2022-4137
8.1
HIGH
Vulnerability Description
A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker.
Published Date
September 25, 2023
Official Source
NIST NVD Advisory