Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47518

HistoryJun 13, 2024 - 12:04 p.m.

Improper Input Validation

2024-06-1312:04:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

improper input validation

email username

existing accounts

reset

login

7.1 High

AI Score

Confidence

High

org.keycloak:keycloak-services is vulnerable to Improper Input Validation. The vulnerability is due to the use of email as a username without checking for existing accounts, which can lead to the inability to reset or login with email for the user.

7.1 High

AI Score

Confidence

High