Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-CQ42-VHV7-XR7P
HistoryJun 12, 2024 - 7:42 p.m.

Keycloak Denial of Service via account lockout

2024-06-1219:42:21
CWE-640
GitHub Advisory Database
github.com
keycloak
account lockout
vulnerability
email username
registration
software

7.1 High

AI Score

Confidence

Low

JSON

In any realm set with “User (Self) registration” a user that is registered with a username in email format can be “locked out” (denied from logging in) using his username.

Affected configurations

Vulners
Node
org.keycloak\keycloakMatchservices
CPENameOperatorVersion
org.keycloak:keycloak-serviceslt24.0.0

7.1 High

AI Score

Confidence

Low

JSON