Detections
Analytics
SCA: security update for org.keycloak:keycloak-account-ui, org.keycloak:keycloak-admin-ui (GHSA-xmcw-mv9p-7pq2)
high Tenable Self-Hosted Container Security Plugin ID 435666
Description
Duplicate Advisory: Keycloak error_description injection on error pages that can trigger phishing attacksSee Also
Plugin Details
Severity: High
ID: 435666
Version: Revision 1.4
Type: Local
Family: SCA Checks
Published: 10/17/2025
Updated: 1/28/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 9/5/2025
Vulnerability Publication Date: 9/5/2025
Reference Information
cwe: CWE-79