CVE:CVE-2022-4361
CNNVD:CNNVD-202306-1905
Red Hat Keycloak是美国红帽（Red Hat）公司的一套为现代应用和服务提供身份验证和管理功能的软件。
Keycloak存在安全漏洞。攻击者利用该漏洞通过设置AssertionConsumerServiceURL值或redirect_uri来执行恶意脚本。
solution:Upgrade redhat keycloak to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade redhat single_sign-on to a higher version than 7.6.4,-,and avoid the version [7.6,7.6.4); Upgrade redhat openshift_container_platform to a higher version than 4.11,4.12,and avoid the version 4.11,4.12; Upgrade redhat openshift_container_platform_for_ibm_linuxone to a higher version than 4.9,4.10,and avoid the version 4.9,4.10; Upgrade redhat openshift_container_platform_for_power to a higher version than 4.9,4.10,and avoid the version 4.9,4.10