GHSA-RVFC-G8J5-9CCF Generation of Error Message Containing Sensitive Information in Keycloak

A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack...

CVE-2020-1717

A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack...

CVE-2020-1717

Keycloak 7.0.1 contains an account email enumeration issue where a logged-in user can determine whether an email is associated with an existing account. The CVE entry notes a low overall CVSS v3.1 base score (2.7) with Confidentiality impact as the primary concern; Privileges Required is High, an...