CVE-2022-2232 — Keycloak: ldap injection on username input
A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.
Published: 2024-11-14 · CVSS: 7.5 · CVSS 3.1
A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7