← All credits

Red Hat would like to thank He Wei（ギカク） for reporting this issue.

2 vulnerability records and advisories credit this contributor.

Keycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linking

Keycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providers