Lucene search

K
osvGoogleOSV:GHSA-85V8-VX4W-Q684
HistoryMay 13, 2022 - 1:12 a.m.

Keycloak Improper Bruteforce Detection

2022-05-1301:12:25
Google
osv.dev
11
keycloak
topt
brute force

EPSS

0.002

Percentile

62.4%

A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.

EPSS

0.002

Percentile

62.4%