description: An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled
problem types: Expected Behavior Violation
affected:
{
product: keycloak
vendor: n/a
versions:
status: affected, version: Keycloak 18
}