Maven/org.keycloak:keycloak-services CVE-2022-2232: low, EPSS 0.65%
Keycloak vulnerable to LDAP Injection on UsernameForm Login
Action: Upgrade org.keycloak:keycloak-services to 23.0.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 23.0.1 | - |
Fixed versions
| 23.0.1 |
Sources
- osv: GHSA-8hc5-rmgf-qx6p#Maven/org.keycloak:keycloak-services
- https://github.com/keycloak/keycloak/security/advisories/GHSA-8hc5-rmgf-qx6p
- https://github.com/keycloak/keycloak/commit/4252e394cf725b16f7e4e19aa32b03fd3fe13fde
- https://github.com/keycloak/keycloak
CVE-2022-2232 · published · modified · JSON