{{ message }}
<
8000
main id="js-repo-pjax-container" >
Nov 16, 2022
·
1 comment
Discussion options
You must be logged in to vote
Comment options
8000
You must be logged in to vote
Heading
Bold
Italic
Quote
Code
Link
Numbered list
Unordered list
Task list
Attach files
Mention
Reference
Menu
reacted with thumbs up emoji
reacted with thumbs down emoji
reacted with laugh emoji
reacted with hooray emoji
reacted with confused emoji
reacted with heart emoji
reacted with rocket emoji
reacted with eyes emoji
Repository navigation
Help to mitigate CVE-2021-20323 Keycloak XSS issue #15527
Answered
by
abstractj
bjornerikolsen
asked this question in
Q&A
|
I’m running Keycloak 15 that have a XSS security vulnerability 2013577 – (CVE-2021-20323) CVE-2021-20323 keycloak-services: POST based reflected Cross Site Scripting vulnerability 2 Reflected XSS on clients-registrations endpoint. It’s fixed in 18.0.0, but I cannot upgrade to 18.0.0 (that would be the best I know). So I’m looking at workarounds to mitigate. But how? This? https://www.keycloak.org/2021/12/cve |
Answered by
abstractj
May 5, 2023
Replies: 1 comment
|
@bjornerikolsen please upgrade to the latest release, our team already resolved this issue. For the complete list of advisories, please check https://github.com/keycloak/keycloak/security/advisories?state=published |
0 replies
Answer selected by
jonkoops
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
@bjornerikolsen please upgrade to the latest release, our team already resolved this issue. For the complete list of advisories, please check https://github.com/keycloak/keycloak/security/advisories?state=published