Описание
A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.
EPSS
Процентиль: 24%
0.00083
Низкий
7.5 High
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.5
redhat
около 2 лет назад
A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.
CVSS3: 7.5
debian
около 1 года назад
A flaw was found in the Keycloak package. This flaw allows an attacker ...
github
около 2 лет назад
Keycloak vulnerable to LDAP Injection on UsernameForm Login
EPSS
Процентиль: 24%
0.00083
Низкий
7.5 High
CVSS3
Дефекты
CWE-20