VULNERABILITY INTELLIGENCE

CVE-2021-3754

CVSS score5.3 MEDIUM
EPSS probability2.19%
CISA KEVNot currently listed
Published2022-08-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may cause trouble in getting password recovery email in case the user forgets the password.

Weakness classification

  • secalert@redhat.com: CWE-20
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references