Junglewise Threat Intelligence

CVE-2023-0105: Keycloak: Impersonation and lockout possible through incorrect handling of email trust

CVE-2023-0105 · Severity: low · CVSS 3.1 · Published 2023-07-18

Technologies: org.keycloak:keycloak-core (Maven). Vendors: Maven.

Executive brief

Keycloak: Impersonation and lockout possible through incorrect handling of email trust

Affected products

  • Maven org.keycloak:keycloak-core

Related threats