10000 CVE-2025-3910 Two factor authentication bypass · Issue #39349 · keycloak/keycloak · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
CVE-2025-3910 Two factor authentication bypass #39349
New issue
New issue
Closed
#39351
Closed
CVE-2025-3910 Two factor authentication bypass#39349
#39351
Assignees
mposolda
Labels
kind/bugCategorizes a PR related to a bugkind/cveIssues identified as CVEs on third-party dependencies, or issues which Keycloak is not affectedrelease/26.0.11release/26.2.2release/26.3.0
@stianst

Description

@stianst
stianst
opened on Apr 30, 2025

Description

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

Metadata

Metadata

Assignees

Labels

kind/bugCategorizes a PR related to a bugkind/cveIssues identified as CVEs on third-party dependencies, or issues which Keycloak is not affectedrelease/26.0.11release/26.2.2release/26.3.0

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions
    0