← Back

Michaelkelly

michaelkelly

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Duouniversalkeycloakauthenticator
duouniversalkeycloakauthenticator
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-49594
1Michaelkelly
1Duouniversalkeycloakauthenticator
Jun 17, 2026
Dec 23, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthenticator 1.0.7 plugin. A specially crafted HTTP request can lead to a disclosure of sensitive information...Show more
An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthenticator 1.0.7 plugin. A specially crafted HTTP request can lead to a disclosure of sensitive information. A user logging into Keycloak using DuoUniversalKeycloakAuthenticator plugin triggers this vulnerability.Show less