{"action":"Upgrade org.keycloak:keycloak-services to 23.0.1 or later.","affected":[{"fixed":"23.0.1","introduced":"0"}],"component":"org.keycloak:keycloak-services","cve_ids":["CVE-2022-2232"],"ecosystem":"Maven","epss":0.00651,"exploited":false,"fixed_versions":["23.0.1"],"ghsa_id":"GHSA-8hc5-rmgf-qx6p","id":"tcs_01M5N8MVMRPBCPBR8QQWN1NFRF","modified_at":"2024-12-04T05:36:37.532782Z","published_at":"2023-11-29T21:33:07Z","references":["https://osv.dev/vulnerability/GHSA-8hc5-rmgf-qx6p","https://github.com/keycloak/keycloak/security/advisories/GHSA-8hc5-rmgf-qx6p","https://github.com/keycloak/keycloak/commit/4252e394cf725b16f7e4e19aa32b03fd3fe13fde","https://github.com/keycloak/keycloak"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-8hc5-rmgf-qx6p#Maven/org.keycloak:keycloak-services","url":"https://osv.dev/vulnerability/GHSA-8hc5-rmgf-qx6p"}],"summary":"Keycloak vulnerable to LDAP Injection on UsernameForm Login"}