CVE-2018-14655 PUBLISHED CVSS 4.599999904632568 MEDIUM

Keycloak vulnerable to cross-site scripting via the state parameter

EPSS 0.22% · 44.5th percentile

Risk Scores

CVSS v3.0
4.599999904632568
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
EPSS Score
0.22%
44.5th percentile

Affected Products

VendorProductVersions
Mavenorg.keycloak:keycloak-parent0, 4.0.0.Beta1, 4.3.0.Final
redhatkeycloak4.0.0, 4.3.0, 3.4.3
redhatsingle_sign-on7.2, 7.2
Red Hatkeycloak3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final

Timeline

References

Open in Interactive Console →