LDAP injection In org.keycloak:keycloak-services
Description
Keycloak vulnerable to LDAP Injection on UsernameForm Login A flaw was found in the Keycloak package. This flaw allows an attacker to benefit from an LDAP query and access existing usernames in the server.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 23.0.1 | ||
maven | 23.0.1 |
Aliases
1. 2. 3. 4. 5.
References
1. 2.