[org.keycloak:keycloak-core] Cross-site Scripting in Keycloak

A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak version 15. The issue was fixed in version 17.0.0.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-20323
• https://bugzilla.redhat.com/show_bug.cgi?id=2013577
• https://github.com/advisories/GHSA-xpgc-j48j-jwv9