Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-8HC5-RMGF-QX6P
HistoryNov 29, 2023 - 9:33 p.m.

Keycloak vulnerable to LDAP Injection on UsernameForm Login

2023-11-2921:33:07
CWE-90
GitHub Advisory Database
github.com
29
keycloak
ldap injection
usernameform
security flaw
usernames

AI Score

6.9

Confidence

Low

JSON

A flaw was found in the Keycloak package. This flaw allows an attacker to benefit from an LDAP query and access existing usernames in the server.

Affected configurations

Vulners
Node
org.keycloak\keycloakMatchservices
OR
org.keycloak\keycloakMatchcore

Related

redhatcve 1
veracode 1
osv 1
nessus 3
redhat 3
redhatcve
redhatcve
CVE-2022-2232
2024-02-08 12:31:54
veracode
veracode
LDAP Injection
2023-11-30 10:30:48
osv
osv
Keycloak vulnerable to LDAP Injection on UsernameForm Login
2023-11-29 21:33:07
nessus
nessus
RHEL 8 : Red Hat Single Sign-On 7.6.6 security update on RHEL 8 (Moderate) (RHSA-2024:0095)
2024-01-09 00:00:00
RHEL 7 : Red Hat Single Sign-On 7.6.6 security update on RHEL 7 (Moderate) (RHSA-2024:0094)
2024-01-09 00:00:00
RHEL 9 : Red Hat Single Sign-On 7.6.6 security update on RHEL 9 (Moderate) (RHSA-2024:0096)
2024-01-09 00:00:00
redhat
redhat
(RHSA-2024:0095) Moderate: Red Hat Single Sign-On 7.6.6 security update on RHEL 8
2024-01-09 16:02:43
(RHSA-2024:0096) Moderate: Red Hat Single Sign-On 7.6.6 security update on RHEL 9
2024-01-09 16:02:48
(RHSA-2024:0094) Moderate: Red Hat Single Sign-On 7.6.6 security update on RHEL 7
2024-01-09 16:02:39

AI Score

6.9

Confidence

Low

JSON
Related for GHSA-8HC5-RMGF-QX6P
redhatcve1veracode1osv1nessus3redhat3