Skip to content
OpenAdvisories

Vendor

FIWARE

5 known vulnerabilities.

Products

FIWARE Keyrock 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-42165

    Arbitrary User Activation

    Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link.

    FIWARE FIWARE Keyrock
  • Medium 4.3
    CVE-2024-42164

    Disabling MFA without Authentication

    Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to disable two factor authorization of any user by predicting the token for the disable_2fa link.

    FIWARE FIWARE Keyrock