Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.keycloak/keycloak-ldap-federation@23.0.1
Typemaven
Namespaceorg.keycloak
Namekeycloak-ldap-federation
Version23.0.1
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version23.0.1
Latest_non_vulnerable_version26.4.6
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-m24y-x4sk-2yd6
vulnerability_id VCID-m24y-x4sk-2yd6
summary 
Keycloak vulnerable to LDAP Injection on UsernameForm Login
A flaw was found in the Keycloak package. This flaw allows an attacker to benefit from an LDAP query and access existing usernames in the server.
references
0
reference_url https://github.com/keycloak/keycloak/commit/4252e394cf725b16f7e4e19aa32b03fd3fe13fde
reference_id
reference_type
scores
url https://github.com/keycloak/keycloak/commit/4252e394cf725b16f7e4e19aa32b03fd3fe13fde
1
reference_url https://github.com/advisories/GHSA-8hc5-rmgf-qx6p
reference_id GHSA-8hc5-rmgf-qx6p
reference_type
scores
url https://github.com/advisories/GHSA-8hc5-rmgf-qx6p
2
reference_url https://github.com/keycloak/keycloak/security/advisories/GHSA-8hc5-rmgf-qx6p
reference_id GHSA-8hc5-rmgf-qx6p
reference_type
scores
url https://github.com/keycloak/keycloak/security/advisories/GHSA-8hc5-rmgf-qx6p
fixed_packages
0
url pkg:maven/org.keycloak/keycloak-ldap-federation@23.0.1
purl pkg:maven/org.keycloak/keycloak-ldap-federation@23.0.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.keycloak/keycloak-ldap-federation@23.0.1
aliases CVE-2022-2232, GHSA-8hc5-rmgf-qx6p
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m24y-x4sk-2yd6
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.keycloak/keycloak-ldap-federation@23.0.1