A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.keycloak:keycloak-ldap-federation(Maven) | 0 | 23.0.1 | N/A |
| org.keycloak:keycloak-services(Maven) | 0 | 23.0.1 | N/A |
CVSS Metrics
