Description
Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in.
Remediation
References
https://nodesecurity.io/advisories/60
Related Vulnerabilities
CVE-2021-31409 Vulnerability in maven package com.vaadin:vaadin-compatibility-server
CVE-2023-37955 Vulnerability in maven package org.jenkins-ci.plugins:test-results-aggregator
CVE-2022-45470 Vulnerability in maven package org.apache.hama:hama-core
CVE-2016-10614 Vulnerability in npm package httpsync
CVE-2021-38296 Vulnerability in maven package org.apache.spark:spark-core