CVE-2022-0225
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
exploitation probability
3.1%top 13% of all CVEs
observed exploitation
nono source reports it
A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.
Affected products
n/a · keycloak