Vulnerability Details CVE-2022-0225
A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.3%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2022-0225
-
cpe:2.3:a:redhat:keycloak:-
-
cpe:2.3:a:redhat:single_sign-on:7.0