description: A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.
problem types: CWE-80
affected:
{
vendor: n/a
product: keycloak
versions:
version: unknown, status: affected
}