CVE-2023-1477: Hypr Keycloak Authenticator

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3.

Affected products

• Hypr Keycloak Authenticator: before 7.10.2 (fixed in 7.10.2); from 8.0.0, before 8.0.3 (fixed in 8.0.3)

Published 2023-04-28. Last modified 2026-06-17.