GHSA-85v8-vx4w-q684
Keycloak Improper Bruteforce Detection
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.keycloak:keycloak-parent | < 4.6.0.Final | 4.6.0.Final |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
References
External links from the advisory. They lead to third-party sites.