Keycloak authorization issue vulnerability

Keycloak has an authorization issue vulnerability. This occurs when, within a domain, the mandatory “Update User Locale” operation is configured before the “Configure OTP” operation. As a result, the system fails to enforce multi-factor authentication during login, potentially allowing attackers...