High · 7.2 CVE-2023-1477 EUVD-2023-23725GHSA-p9xp-jx22-qh3q

Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak…

Published Apr 28, 2023 · Updated Mar 5, 2025 · Assigned by HYPR

Vendor: HYPR Product: Keycloak Authenticator Extension

Description

Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3.

Affected products

Vendor	Product	Affected	Fixed
HYPR	Keycloak Authenticator Extension	< 7.10.2, < 8.0.3	7.10.2

References

https://www.hypr.com/security-advisories