A vulnerability classified as problematic has been found in Keycloak. This affects an unknown part of the component Login. The manipulation of the argument UsernameForm leads to ldap injection.

This vulnerability is uniquely identified as CVE-2022-2232. The attack needs to be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.