Back to Database
Status published
Unknown
CVE-2023-0105
A flaw was found in Keycloak. This flaw allows impersonation...
Vulnerability Description
A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0105
Credits & Attribution
No credits recorded in the NVD database.
More from redhat.com
View All →CVE-2023-0264
A flaw was found in Keycloaks OpenID Connect user authentication,...
Unknown
0
CVE-2023-0091
A flaw was found in Keycloak, where it did not...
Unknown
0
CVE-2022-3841
RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request...
Unknown
0
CVE-2022-3782
keycloak: path traversal via double URL encoding. A flaw was...
Unknown
0
CVE-2022-3143
wildfly-elytron: possible timing attacks via use of unsafe comparator. A...
Unknown
0
Affected Vendor
redhat.com
View all reports →Affected Software
Keycloak
Vulnerable Versions:
Unknown
Timeline
Official Publish:
January 11th, 2023
Last Modified:
April 9th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.