1. Security Flaw: Keycloak Default Configuration Leaves Wanaku Vulnerable to Brute Force Attacks
A critical security vulnerability has been identified in the default configuration of the Wanaku authentication system, leaving it exposed to credential stuffing and password brute force attacks. The core issue resides in the Keycloak realm configuration file, where brute force protection is explicitly disabled. This o...