CVE-2025-3910

MEDIUM5.4EPSS 0.07%

Keycloak vulnerable to two factor authentication bypass

發布日:2025/4/30修改日:2026/2/4

描述

# Description A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM5.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

參考連結(8)