Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-0105
HistoryJan 13, 2023 - 6:15 a.m.

Design/Logic Flaw

2023-01-1306:15:00
PRIOn knowledge base
www.prio-n.com
10
keycloak
flaw
impersonation
lockout
email threat

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%