← Database

CVE-2022-2668

HIGH CVSS: 7.2 Published: 2022-08-05 Modified: 2026-06-17

Description

An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled

Affected Platforms

Redhat Single Sign-OnRedhat Keycloak

Weakness Type

NVD-CWE-noinfo

References