Repository navigation
Help to mitigate CVE-2021-20323 Keycloak XSS issue #15527
Answered
by
abstractj
bjornerikolsen
asked this question in
Q&A
|
I’m running Keycloak 15 that have a XSS security vulnerability 2013577 – (CVE-2021-20323) CVE-2021-20323 keycloak-services: POST based reflected Cross Site Scripting vulnerability 2 Reflected XSS on clients-registrations endpoint. It’s fixed in 18.0.0, but I cannot upgrade to 18.0.0 (that would be the best I know). So I’m looking at workarounds to mitigate. But how? This? https://www.keycloak.org/2021/12/cve |
Answered by
abstractj
May 5, 2023
Replies: 1 comment
|
@bjornerikolsen please upgrade to the latest release, our team already resolved this issue. For the complete list of advisories, please check https://github.com/keycloak/keycloak/security/advisories?state=published |
0 replies
Answer selected by
jonkoops
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
@bjornerikolsen please upgrade to the latest release, our team already resolved this issue. For the complete list of advisories, please check https://github.com/keycloak/keycloak/security/advisories?state=published