CVE-2022-4361 (keycloak, openshift_container_platform, openshift_container_platform_for_ibm_linuxone, openshift_container_platform_for_power, single_sign-on)

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.

access access management cross-site cve identity identity and access identity and access management keycloak malicious management saml scripting scripts solution value vulnerability xss