Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2024-4028

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack.

CVSS v3:

  • Severity: Unknown
  • Score:
  • AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
org.keycloak / keycloak-core - 26.1.2.x