Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-1722

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cq42-vhv7-xr7p

Keycloak Denial of Service via account lockout In any realm set with "User (Self) registration" a user that is registered with a username in email format can be "locked out" (denied from logging in) using his username.

gitlab/maven/org.keycloak/keycloak-core/CVE-2024-1722

Keycloak DoS via account lockout A flaw was found in Keycloak. In certain conditions, this issue may allow a remote unauthenticated attacker to block other accounts from logging in.

gitlab/maven/org.keycloak/keycloak-services/CVE-2024-1722

Keycloak Denial of Service via account lockout In any realm set with "User (Self) registration" a user that is registered with a username in email format can be "locked out" (denied from logging in) using his username.