Description (CNA)
A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 18.0.8 before 18.0.8 |
| Red Hat / Red Hat Build of Keycloak | unaffected |
| Red Hat / Red Hat Single Sign-On 7 | affected |
CWE
CWE-20
References
- https://access.redhat.com/security/cve/CVE-2024-4028
- https://bugzilla.redhat.com/show_bug.cgi?id=2276418
ADP enrichment
No English description supplied.
No references supplied.