REDHAT-BUG-2101942: Low severity keycloak vulnerability

Published Jun 28, 2022

Updated

Keycloak does not properly sanitize inputs in certain UI fields in client registration. A malicious authenticated user with administrative privileges could use this flaw to conduct cross-site scripting attacks and possibly gain access to user-sensitive information.

Affected Software

1 affected component

Red Hat Keycloak

Event History

Jun 28, 2022

Data Sourced

via Red Hat·08:47 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2101942?

The severity of REDHAT-BUG-2101942 is considered critical due to the potential for cross-site scripting attacks.

How do I fix REDHAT-BUG-2101942?

To fix REDHAT-BUG-2101942, you should update to the latest patched version of Red Hat Keycloak.

Who is affected by REDHAT-BUG-2101942?

Authenticated users with administrative privileges in Red Hat Keycloak are affected by REDHAT-BUG-2101942.

What type of attack is possible due to REDHAT-BUG-2101942?

REDHAT-BUG-2101942 allows for cross-site scripting attacks that can compromise user-sensitive information.

What components are involved in REDHAT-BUG-2101942?

REDHAT-BUG-2101942 involves UI fields in the client registration process of Red Hat Keycloak.