[GHSA-4vc8-pg5c-vg4x] Keycloak's improper input validation allows using email as username

[Chetven]

Updates

• Affected products

Comments
CVE Id is mentioned in GHSA-4vc8-pg5c-vg4x
But there Is no field to update it here, can it be updated to CVE-2021-3754

[github]

Hi there @abstractj! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[abstractj]

@Chetven thanks for submitting those changes, although I'm struggling to see the changes related to affected products. The only changes was in the date modified and adding a new line to aliases.

[Chetven]

@Chetven thanks for submitting those changes, although I'm struggling to see the changes related to affected products. The only changes was in the date modified and adding a new line to aliases.

@abstractj I wanted to update the CVE id for this GHSA, but I couldn't do that as there was no field to update the same on Vulnerability improvement form, so I left it the comments.

CVE-2021-3754 must be added in alias.

[advisory-database]

Hi @Chetven! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!