[keycloak-dev] Multiple XSS vulnerabilities in Keycloak

[Bastian Ike]

Hi together,

Yesterday I found two XSS vulnerabilities in Keycloak (after a quick view, there might be more).
I was wondering who I should contact about details so we can work together to resolve these issues.


Thanks,
Bastian
[cid:BF075044-5F71-4F12-AE62-AB2296BF7131]

Bastian Ike
Magento Developer


AOE GmbH
Kirchgasse 6
65185 Wiesbaden
Germany

Tel. +49 6122 70 70 7 -0
Fax. +49 6122 70 70 7 -399


e-Mail: bastian.ike at aoe.com
Web: http://www.aoe.com<http://www.aoe.com/>



Pflichtangaben laut Handelsgesetz §37a / Aktiengesetz §35a

USt-ID Nr.: DE250247455
Handelsregister: Wiesbaden B
Handelsregister Nr.: 22567

Stammsitz: Wiesbaden
Creditreform: 625.0209354
Geschäftsführer: Kian Toyouri Gould


Diese E-Mail Nachricht enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail.
This e-mail message may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20150220/786294a5/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 79FD24C9-5B11-4B19-B23C-A41C892D877F[1].png
Type: image/png
Size: 24139 bytes
Desc: 79FD24C9-5B11-4B19-B23C-A41C892D877F[1].png
Url : http://lists.jboss.org/pipermail/keycloak-dev/attachments/20150220/786294a5/attachment-0001.png