Duouniversalkeycloakauthenticator

duouniversalkeycloakauthenticator

Vendor: Michaelkelly • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-49594

1Michaelkelly

1Duouniversalkeycloakauthenticator

Jun 17, 2026

Dec 23, 2023

N/A· v4

6.5 MEDIUM· v3

N/A· v2

An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthenticator 1.0.7 plugin. A specially crafted HTTP request can lead to a disclosure of sensitive information. A user logging into Keycloak using DuoUniversalKeycloakAuthenticator plugin triggers this vulnerability.Show less