CVE-2023-0105

A flaw was found in Keycloak

Medium · published January 11, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00719 · 53.4th percentile
Published
2023-01-11T20:46Z
EPSS history
Timeline
  • 11 JAN 20:46Z
    A flaw was found in Keycloak
    cvelistv5