En resumen
- CVE-2022-2232 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a org.keycloak:keycloak-ldap-federation, org.keycloak:keycloak-services.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.65%, mayor que el 51.2% de las vulnerabilidades.
- Solución: actualizar a 23.0.1 o posterior.
Description
A flaw was found in the Keycloak package. This flaw allows an attacker to benefit from an LDAP query and access existing usernames in the server.
NVD description
A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.
Más vulnerabilidades de org.keycloak:keycloak-ldap-federation
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free