Current behavior
The check says that keycloak is vulnerable
Expected behavior
No warning for fixed versions
Motivation for change
Its not working as expected
Environment details
- Burp version: 2024.4.2
- BCheck language version:
- Operating System: Linux
Additional details
The response contains an escaped xss payload instead of an unescaped:
...Unrecognized field \"<img src=x onerror=\"alert('Bo0oq')\"/>\ ...
But it would need to look like here: https://medium.com/@raia39499/how-i-exploit-cve-2021-20323-33d2f8d6826c
Current behavior
The check says that keycloak is vulnerable
Expected behavior
No warning for fixed versions
Motivation for change
Its not working as expected
Environment details
Additional details
The response contains an escaped xss payload instead of an unescaped:
...Unrecognized field \"<img src=x onerror=\"alert('Bo0oq')\"/>\ ...But it would need to look like here: https://medium.com/@raia39499/how-i-exploit-cve-2021-20323-33d2f8d6826c