Description (CNA)
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / keycloak | affected Keycloak 18 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.