CVE-2021-20323: XSS
A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.
Other sources
A POST based reflected Cross Site Scripting vulnerability on Keycloak version 15.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/keycloakto a version that resolves this vulnerability.Fixed in 18.0.0
Event History
Frequently Asked Questions
What is CVE-2021-20323?
CVE-2021-20323 is a POST based reflected Cross Site Scripting vulnerability in Keycloak.
How severe is CVE-2021-20323?
CVE-2021-20323 has a severity rating of medium (6.1).
Which software is affected by CVE-2021-20323?
The affected software includes Redhat Keycloak versions up to 17.0.0 and redhat/keycloak versions up to 18.0.0.
How can I fix CVE-2021-20323?
To fix CVE-2021-20323, update your Keycloak installation to version 18.0.0 or higher.
Where can I find more information about CVE-2021-20323?
More information about CVE-2021-20323 can be found at the following link: https://bugzilla.redhat.com/show_bug.cgi?id=2013577