| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-services | < 24.0.0 | 24.0.0 |
| keycloak | = 23.0.5 |
In any realm set with "User (Self) registration" a user that is registered with a username in email format can be "locked out" (denied from logging in) using his username.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free