An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Références

• advisory github.com
• advisory nvd.nist.gov
• web access.redhat.com