CVEs-PoC/2021/CVE-2021-3513.md

CVE-2021-3513

Description

A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.

POC

Reference

No PoCs from references.

Github

• https://github.com/muneebaashiq/MBProjects