CVE-2023-0105

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.

• CWE-287
• CWE-287

• https://access.redhat.com/security/cve/CVE-2023-0105Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-0105Vendor Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0099The Simple URLs WordPress plugin before 115 does not sanitis…6.1
• CVE-2023-0100In Eclipse BIRT, starting from version 2.6.2, the default co…8.8
• CVE-2023-0101A privilege escalation vulnerability was identified in Nessu…8.8
• CVE-2023-0102LS ELECTRIC XBC-DN32U with operating system version 01.80 is…9.1
• CVE-2023-0103If an attacker were to access memory locations of LS ELECTRI…7.5
• CVE-2023-0104 The listed versions for Weintek EasyBuilder Pro are vulnera…7.8
• CVE-2023-0106Cross-site Scripting (XSS) - Stored in GitHub repository use…5.4
• CVE-2023-0107Cross-site Scripting (XSS) - Stored in GitHub repository use…5.4
• CVE-2023-0108Cross-site Scripting (XSS) - Stored in GitHub repository use…5.4
• CVE-2023-0109A stored cross-site scripting (XSS) vulnerability was discov…5.4
• CVE-2023-0110Cross-site Scripting (XSS) - Stored in GitHub repository use…5.4
• CVE-2023-0111Cross-site Scripting (XSS) - Stored in GitHub repository use…5.4