CVE-2020-10734

2021-02-1115:29:45

CWE-352

redhat

www.cve.org

vulnerability

keycloak

csrf protection

red hat fuse 7

red hat single sign-on 7

red hat openshift application runtimes

oidc logout endpoint

AI Score

3.8

Confidence

High

EPSS

Percentile

12.6%

JSON

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.

CNA Affected

[
  {
    "product": "keycloak",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "As shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes"
      }
    ]
  }
]