| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-parent | < 4.6.0.Final | 4.6.0.Final |
| keycloak | = 4.2.1= 4.3.0 | |
| single sign-on | = 7.2 |
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free