What is GHSA-2mq8-99q7-55wx?

GHSA-2mq8-99q7-55wx is a security advisory published by GitHub Security Advisories with High severity. Code injection in keycloak

Which CVE IDs does GHSA-2mq8-99q7-55wx cover?

GHSA-2mq8-99q7-55wx covers the following CVE IDs: CVE-2021-20222. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2mq8-99q7-55wx?

GHSA-2mq8-99q7-55wx has a CVSS v3 base score of 8.3, published by GitHub Security Advisories.

Which products are affected by GHSA-2mq8-99q7-55wx?

GHSA-2mq8-99q7-55wx affects 1 product, including: maven/org.keycloak:keycloak-parent:\u003e= 9.0.0, \u003c 12.0.3.

GHSA-2mq8-99q7-55wxHighCVSS 8.3

Code injection in keycloak

Vendor

GitHub Security Advisories

Published

May 13, 2021

Last Modified

January 29, 2023

🔗 CVE IDs covered (1)

CVE-2021-20222 →

📋 Description

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

🎯 Affected products1

maven/org.keycloak:keycloak-parent:>= 9.0.0, < 12.0.3

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-20222
https://github.com/keycloak/keycloak/commit/3b80eee5bfdf2b80c47465c0f2eaf70074808741
https://access.redhat.com/security/cve/cve-2021-20222
https://bugzilla.redhat.com/show_bug.cgi?id=1924606
https://github.com/advisories/GHSA-2mq8-99q7-55wx