CVE-2024-4028: Red Hat Build Of Keycloak

Low severity, CVSS 3.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack.

Affected products

• Red Hat Red Hat Build Of Keycloak
• Red Hat Red Hat Single Sign-On 7

Published 2025-02-18. Last modified 2026-06-17.