critical10.0
CVE-2022-4361
Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
Impact
AssertionConsumerServiceURL is a Java implementation for SAML Service Providers (org.keycloak.protocol.saml). Affected versions of this package are vulnerable to Cross-site Scripting (XSS). AssertionConsumerServiceURL allows XSS when sending a crafted SAML XML request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.keycloak:keycloak-services | < 21.1.2 | 21.1.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Keycloak | before 21.1.2 |
| Redhat | Single Sign-On | from 7.6 before 7.6.4 All versions |
| Redhat | Openshift Container Platform | Versions 4.11, 4.12 |
| Redhat | Openshift Container Platform For Ibm Linuxone | Versions 4.9, 4.10 |
| Redhat | Openshift Container Platform For Power | Versions 4.9, 4.10 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2151618
- https://github.com/keycloak/keycloak/commit/a1cfe6e24e5b34792699a00b8b4a8016a5929e3a
- https://github.com/advisories/GHSA-3p62-6fjh-3p5h
- https://github.com/keycloak/keycloak/security/advisories/GHSA-3p62-6fjh-3p5h
- https://nvd.nist.gov/vuln/detail/CVE-2022-4361