Every CVE Search/ Get API key

CVE-2022-2232

Keycloak: ldap injection on username input

7.5 HighFix available

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.65%Up 0.6 points since Nov 15, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

Keycloak: ldap injection on username input

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.

Record
CVE-2022-2232
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2023-2922 7.5

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.

Record
EUVD-2023-2922
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-8hc5-rmgf-qx6p No score

Keycloak vulnerable to LDAP Injection on UsernameForm Login

A flaw was found in the Keycloak package. This flaw allows an attacker to benefit from an LDAP query and access existing usernames in the server.

Record
GHSA-8hc5-rmgf-qx6p
Weakness
CWE-90
Updated
2026-11-02
NVD 7.5

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.

Record
CVE-2022-2232
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-20
Updated
2026-11-02
OSVRHSA-2024:0094 7.5

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 7

Record
RHSA-2024:0094
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:0095 7.5

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 8

Record
RHSA-2024:0095
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:0096 7.5

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 9

Record
RHSA-2024:0096
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVGHSA-8hc5-rmgf-qx6p No score

Keycloak vulnerable to LDAP Injection on UsernameForm Login

A flaw was found in the Keycloak package. This flaw allows an attacker to benefit from an LDAP query and access existing usernames in the server.

Record
GHSA-8hc5-rmgf-qx6p
Weakness
CWE-90
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.keycloak:keycloak-ldap-federation
Maven
 before 23.0.1
23.0.1
org.keycloak:keycloak-services
Maven
 before 23.0.1
23.0.1
org.keycloak:keycloak-ldap-federation
Maven
 before 23.0.1, plus listed versions
1.0-beta-41.0-final1.0-rc-11.0-rc-21.0.1.Final
Show 45 moreShow less
1.0.2.Final1.0.3.Final1.0.4.Final1.0.5.Final1.1.0.Beta11.1.0.Beta21.1.0.Final1.1.1.Final1.2.0.Beta11.2.0.CR11.2.0.Final1.3.0.Final1.3.1.Final1.4.0.Final1.5.0-Final1.5.0.Final1.5.1.Final1.6.0.Final1.6.1.Final1.7.0.CR11.7.0.Final1.8.0.Alpha11.8.0.CR11.8.0.CR21.8.0.CR31.8.0.Final1.8.1.Final1.9.0.CR11.9.0.Final1.9.1.Final1.9.2.Final1.9.3.Final1.9.4.Final1.9.5.Final1.9.7.Final1.9.8.Final10.0.010.0.110.0.211.0.011.0.111.0.211.0.312.0.012.0.1
23.0.1
org.keycloak:keycloak-services
Maven
 before 23.0.1, plus listed versions
1.0-alpha-11.0-alpha-1-120620131.0-alpha-21.0-alpha-31.0-alpha-4
Show 45 moreShow less
1.0-beta-11.0-beta-1-201505211.0-beta-1-201505231.0-beta-21.0-beta-31.0-beta-41.0-final1.0-rc-11.0-rc-21.0.1.Final1.0.2.Final1.0.3.Final1.0.4.Final1.0.5.Final1.1.0.Beta11.1.0.Beta21.1.0.Final1.1.1.Final1.2.0.Beta11.2.0.CR11.2.0.Final1.3.0.Final1.3.1.Final1.4.0.Final1.5.0-Final1.5.0.Final1.5.1.Final1.6.0.Final1.6.1.Final1.7.0.CR11.7.0.Final1.8.0.Alpha11.8.0.CR11.8.0.CR21.8.0.CR31.8.0.Final1.8.1.Final1.9.0.CR11.9.0.Final1.9.1.Final1.9.2.Final1.9.3.Final1.9.4.Final1.9.5.Final1.9.7.Final
23.0.1
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 2 CVEs
 before 0:18.0.11-3.redhat_00001.1.el7sso
0:18.0.11-3.redhat_00001.1.el7sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 2 CVEs
 before 0:18.0.11-3.redhat_00001.1.el7sso
0:18.0.11-3.redhat_00001.1.el7sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 2 CVEs
 before 0:18.0.11-3.redhat_00001.1.el8sso
0:18.0.11-3.redhat_00001.1.el8sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 2 CVEs
 before 0:18.0.11-3.redhat_00001.1.el8sso
0:18.0.11-3.redhat_00001.1.el8sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 2 CVEs
 before 0:18.0.11-3.redhat_00001.1.el9sso
0:18.0.11-3.redhat_00001.1.el9sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 2 CVEs
 before 0:18.0.11-3.redhat_00001.1.el9sso
0:18.0.11-3.redhat_00001.1.el9sso

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-2232 is a high vulnerability (CVSS 7.5) in Red Hat Single Sign-on 7, published November 29, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in org.keycloak:keycloak-ldap-federation 23.0.1.

References

Show 13 moreShow less
This page doesn't list everything

Left out here: 212 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open