Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2022-0225
A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.
| Software | From | Fixed in |
|---|---|---|
| redhat / single_sign-on | 7.0 | 7.0.x |
org.keycloak / keycloak-core
|
- | 16.1.0.x |