CVE-2023-0105

Source
https://cve.org/CVERecord?id=CVE-2023-0105
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0105.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-0105
Aliases
Downstream
Published
2023-01-13T06:15:11.983Z
Modified
2026-03-14T12:00:44.850668Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
Summary
[none]
Details

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.

References

Affected packages

Git /

Affected ranges

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0105.json"