description: A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.
problem types: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
product: keycloak
vendor: n/a
versions:
status: affected, version: Not-Known
}