CVE-2022-2232

creationtimestamp| type| source ---|---|--- 2024-11-14 14:55:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113481884933073861 2024-11-14 16:39:44+00:00| seen| https://t.me/cvedetector/10965...

CVE-2022-2232

CVE-2022-2232 concerns a LDAP injection in Keycloak’s username lookup, allowing bypass and potentially other actions. Affected: Keycloak package; root cause: LDAP injection during username lookup. Impact: high confidentiality risk; no user interaction required, network vector, privileges not requ...

CVE-2022-2232 Keycloak: ldap injection on username input

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions...