MEDIUM 4.8 Maven
Cross-site Scripting in keycloak
GHSA-484q-784p-8m5h · CVE-2020-10776
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.
Ready to move
Start Securing
Free, no credit card | First findings in minutes