CVE-2022-2668
EUVD-2022-696205.08.2022, 17:15
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabledEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | keycloak | 18.0.0 |
| redhat | single_sign-on | 7.0 |
𝑥
= Vulnerable software versions