Threats tagged 'ghsa-vv23-h6x5-hjjh'

A vulnerability in Keycloak's keycloak-services component allows an authenticated attacker to exploit a race condition during the credential reset process. This flaw arises from improper verification of authenticators when switching between authentication flows, enabling the attacker to associate their authentication state with another user's session. Successful exploitation can lead to full account takeover, including password changes and access to victim data.