Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-0105

Опубликовано: 13 янв. 2023
Источник: debian
EPSS Низкий

Описание

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
keycloakitppackage

EPSS

Процентиль: 32%
0.00125
Низкий

Связанные уязвимости

CVSS3: 6.3
redhat
около 3 лет назад

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.

CVSS3: 6.5
nvd
около 3 лет назад

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.

CVSS3: 6.5
github
больше 2 лет назад

Keycloak: Impersonation and lockout possible through incorrect handling of email trust

EPSS

Процентиль: 32%
0.00125
Низкий