Threats affecting pkg:github/instipod/DuoUniversalKeycloakAuthenticator

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.5	EPSS 1.2%	CVE-2023-49594instipod DuoUniversalKeycloakAuthenticator · Information Exposure Through Sent Data Medium4.5EPSS 1.2%2023-12-23CVE Database V5CVE-2023-49594 An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthenticator 1.0.7 plugin. A specially crafted HTTP request can lead to a disclosure of sensitive information. A user logging into Keycloak using DuoUniversalKeycloakAuthenticator plugin triggers this vulnerability. EPSS 1.2%Vulnerability CWE-201	CVE Database V5	2023-12-23

Page 1 of 1