https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:33:45 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0090 certfr-2024-avi-0090 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0090 https://cve.radiocsirt.org/vuln/euvd-2026-227926 EUVD-2026-227926 https://cve.radiocsirt.org/vuln/euvd-2026-227926 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0105 <p>A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.</p> <p>A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0105 https://cve.radiocsirt.org/vuln/ghsa-c7xw-p58w-h6fj <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>Impersonation and lockout are possible due to email trust not being handled correctly in Keycloak. Since the verified state is not reset when the email changes, it is possible for users to shadow others with the same email and lock out or impersonate them.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>Impersonation and lockout are possible due to email trust not being handled correctly in Keycloak. Since the verified state is not reset when the email changes, it is possible for users to shadow others with the same email and lock out or impersonate them.</p> https://cve.radiocsirt.org/vuln/ghsa-c7xw-p58w-h6fj https://cve.radiocsirt.org/vuln/gsd-2023-0105 gsd-2023-0105 https://cve.radiocsirt.org/vuln/gsd-2023-0105 https://cve.radiocsirt.org/vuln/rhsa-2023:7482 <p>keycloak: impersonation and lockout possible through incorrect handling of email trust bouncycastle: potential blind LDAP injection attack using a self-signed certificate HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)</p> <p>keycloak: impersonation and lockout possible through incorrect handling of email trust bouncycastle: potential blind LDAP injection attack using a self-signed certificate HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)</p> https://cve.radiocsirt.org/vuln/rhsa-2023:7482 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0036 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Sicherheitsvorkehrungen zu umgehen und dadurch Nutzerrechte zu erlangen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Sicherheitsvorkehrungen zu umgehen und dadurch Nutzerrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0036