Redhat: >> Keycloak >> 18.0.0 Security Vulnerabilities
A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.
CVSS Score
5.4
EPSS Score
0.008
Published
2023-03-29
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled
CVSS Score
7.2
EPSS Score
0.002
Published
2022-08-05
Page 2